Manager, Security Architect - Financial Services, Enterprise Security

Connect to your Industry

Cyber security is critical to every organisation. We are designing and building solutions to help secure some of the largest financial services organisations, and we need you to join us. You’ll build strong relationships as one of the areas of our cyber practice with over 450 extremely talented individuals in the UK alone, as part of a Technology and Transformation practice of 7,500 people. Join us and you will help our clients solve the latest cyber security challenges, in a business with very significant growth ambitions enjoying the kind of professional development that will set your potential free.

Connect to your career at Deloitte

Deloitte drives progress. Using our vast range of expertise, we help our clients' become leaders wherever they choose to compete. To do this, we invest in outstanding people. We build teams of future thinkers, with diverse talents and backgrounds, and empower them all to reach for and achieve more.

What brings us all together at Deloitte? It’s how we approach the thousands of decisions we make every day. How we behave, our beliefs and our attitudes. In other words: our values. Whatever we do, wherever we are in the world, we lead the way, serve with integrity, take care of each other, foster inclusion, and collaborate for measurable impact. These five shared values lead every decision we make and action we take, guiding us to deliver impact how and where it matters most.

Connect to your opportunity

We are a team of cyber security architects and engineers working within the wider Deloitte Technology and Transformation practice, securing technology capabilities that our clients in the Financial Services industry deploy, for example, ERP solutions, HR solutions, industry-specific applications, core banking platforms, and core insurance platforms.

We also help to architect and engineer standalone cyber security solutions, such as cloud security and platform capabilities, data loss prevention technologies, DevSecOps pipelines, and solutions in the Zero Trust networking space.

We are seeking skilled security architects to join the team. The ideal candidate will have a background in designing, implementing, integrating, and operating cyber security solutions that help protect our clients. Our projects vary greatly and your responsibility as a Security Architect will differ based on the focus of the client engagement and your skillset, but this could include:

Designing and architecting cyber security solutions by:

• Creating high-level and low-level designs that align with business objectives and comply with industry cybersecurity standards (e.g., NIST).
• Defining the system specifications to support optimal performance.
• Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions.
• Defining the Responsible, Accountable, Consulted, and Informed (RACI) matrix to operate and maintain the solution’s components.
• Supporting the development and maintenance of security architecture patterns, blueprints, and reference models.
• Defining functional and non-functional security solution requirements and technical specifications.
• Helping clients evaluate and select security technologies and products in their security roadmap, helping ensure the selected tooling aligns with requirements.
• Reviewing the configuration of existing systems or solutions and identifying security issues or improvement activities to help ensure security risks are pro-actively managed and solutions drive planned benefits.
• Understanding security control requirements, as defined in security policies, standards and control frameworks and translating them into architecture patterns and solution designs.
• Maintaining awareness of current and emerging security risks and the changing threat landscape, recommending solutions to help drive security enhancements for our clients.
• Driving the implementation of new cyber security solutions by:
• Overseeing the configuration and implementation of the solution, supporting security rules, e.g. network rule changes.
• Collaborating with wider IT teams to ensure pre-requisites have been met.
• Developing technical documentation for cyber security solutions including process documentation.
• Delivering services post-implementation, from hyper-care support, resolving additional issues in production through advanced troubleshooting and debugging.
• Conducting knowledge transfer to client teams through technical training sessions on operating and maintaining the solution, empowering clients to effectively manage and support the environment.
• Contributing to sales activity, through proposal documentation and eminence materials.

Connect to your skills and professional experience

Successfully applicants typically have a degree or equivalent experience, with real world experience working in cyber security. They are agile thinkers capable of helping stakeholders manage a range of security challenges. Key skills – not every candidate requires all of these but should be familiar and/or have experience with a majority of these:

• Extensive security architecture experience.
• Demonstrated experience and knowledge of two to four or more of the following areas:
• Cloud / data center security, with experience hardening these environments.
• DevSecOps, with experience securing pipelines, as well as APIs and containerised environments.
• Data security, with knowledge of different data types and experience applying security measures to protect data across the lifecycle.
• Network security, with an understanding of zero trust principles and experience deploying security technologies to secure complex network environments.
• Identity, with experience in customer identity, enterprise identity, authorisation mechanisms and/or secrets management.
• Security operations, with experience designing or integrating with the wider security technologies and infrastructure.
• Understanding of risk assessment methodologies and the ability to articulate security risks to business stakeholders.
• Ability to define, shape, and execute on security strategies.
• Understanding of business processes and ability to identify and integrate security into them.
• Prior experience within financial services.
• Organised with a proven ability to prioritise workload, meet deadlines, and utilise time effectively.

Qualifications:

• Bachelor’s or master’s degree (or equivalent) in information technology, Cybersecurity, computer science or a related field, or equivalent work experience.
• Information Security and /or Information Technology industry certification (CISSP-ISSAP, CISM, GIAC or equivalent) strongly preferred.
• Industry-recognised architecture certification (SABSA, TOGAF or equivalent) is preferred.
• Certifications from industry-leading security vendors and/or cloud providers would be desirable.
• The following skills are also desirable:
• Experience in secure configuration of Cloud and container-based architectures and implementations (e.g., Kubernetes, Docker, etc.)
• Software development skills including scripting - Python/JAVA/ASP/C#/PowerShell, Coding frameworks.

Connect to your business - Technology and Transformation

Distinctive thinking, deep expertise, innovation and collaborative working. That’s what connects us. That’s what makes us Deloitte. If you want to help solve some of the biggest tech and transformational challenges around, join us. Together, we’ll make an impact that matters.

Cyber

The modern world is more complex than ever before, and we are navigating an ever-changing landscape. We help clients to operate with resilience and grow with confidence to secure success and minimise risk.

Personal independence

Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to a number of audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints (e.g., in relation to any financial interests and employment relationships). This can mean that you and your "Immediate Family Members" are not permitted to hold certain financial interests (shares, funds, bonds etc.) with audit clients of the firm, and also prohibitions on certain employment relationships (e.g., you are not permitted to hold a secondary employment role with SEC audit clients of the firm whilst being employed by the firm). The recruitment team will provide further detail as you progress through the recruitment process or you can contact the Independence team upon request.

Connect with your colleagues

“At Deloitte you’re surrounded by subject matter experts; industry experts, technology experts, and you can access that knowledge whenever you need to.” -Christian, Technology and Transformation

"We have a great culture, and the number of opportunities here mean you can develop as an individual in the direction that suits you best." - Gurpal, Technology and Transformation

Our hybrid working policy

You’ll be based in London with hybrid working.

At Deloitte we understand the importance of balancing your career alongside your home life. That’s why we’ll support you to work flexibly through our hybrid working policy. Depending on the requirements of your role, you’ll have the opportunity to work in your local office, virtual collaboration spaces, client sites and remotely. You’ll get the chance to meet face to face when needed, while you collaborate and learn from colleagues, share your experiences, and build the relationships that will fuel your career and prioritise your wellbeing. Please check with your recruiter for the specific working requirements that may apply for your role.

For a full job description please visit our online Deloitte Careers portal.