Cyber Enterprise Architect

Duties

• The purpose of this role is to support the establishment, maintenance, and enforcement of a coherent cyber security architecture.
• The cyber enterprise architect fulfils the role of Cyber Segment architecture and Engineer and works closely with the NCSC Solution and Roadmaps Section head and NCSC cyber solution architects to support the development and maintenance of business and architecture objectives, and corresponding approaches to cyber security processes, applications, and technology that when applied leads to a coherent and secure implementation.
• In addition, the cyber enterprise architect will support projects and project/programme managers in the implementation of the architecture through a portfolio of projects.
• This includes production of an array of architectural models and views, establishing and communicating the approach taken and its role in the overall cyber security landscape.
• Synchronization of cyber approach with the NCI Agency's existing and future business goals.
• Optimisation of cyber security approaches via a perception of growing operational and business requirements and technological functionalities.
• Promotion of shared applications and infrastructure to maximise efficiencies and enhance the capability.
• Work closely with solutions architects to provide an opinion based enterprise solution that is flexible, scalable and capable of synchronising with continuously changing business requirements.
• Administration of risks related to cyber security by means of proper security policies and standards.
• Direct/indirect participation in developing policies, guidelines and standards that steer the development, selection, application and utilization of cyber security capabilities within NCIA.
• Promote and support the expertise of the team.
• Develop team know-how and abilities in particular areas of expertise.
• Responsibility for the tactical direction of COO NCSC in conjunction with solution architects, peers, and SME's.
• The Cyber Enterprise Architect will play a key role undertaking the NCSC business intake process.
• When it comes to new intake (from cyber and non cyber projects) and assessment of 1) what needs to be done from an enterprise perspective and coherency, 2) alignment to NCSC services in order to identify impacts and requirements, 3) support to NCSC solutions architecture development in key areas such as cloud, PKI, post quantum cryptography, cyber resilience by design, next generation cyber security monitoring, artificial intelligence for Cyber security capabilities, and several other cyber related capability development, converging both enterprise architectural needs and service transition aspects.
• The cyber enterprise architect will need to keep a holistic view of all activities in the Portfolio, assist the operational, scientific, and project teams to ensure the articulation and delivery of requirements are met and to provide the appropriate level of Assurance.
• The cyber enterprise architect shall issue related documentation as required in support of NCI Agency's service delivery to NATO.
• The cyber enterprise architect must have excellent communications skills, spoken and written, being able to clearly explain complicated technical matters to non-technical audiences.

Requirement

• The cyber enterprise architect shall have knowledge and experience (at least 3 years) in developing and applying ICT architectures in support of the business objectives in a service based context.
• This shall include knowledge of one or more architectural frameworks, preferably TOGAF, the Archimate meta model and the NATO Architecture Framework.
• The cyber enterprise architect shall hold relevant certifications in cyber security, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or GIAC Security.
• The cyber enterprise architect background shall include knowledge and experience in the full range of cyber security capabilities, including selection and deployment of/ability to do: Preventive security measures such as endpoint protection, boundary protection, and identity and access management.
• Defensive security measures such as monitoring, correlation, detection, and response to security incidents.
• Assessment of cyber security including risk management and vulnerability assessments.
• Sustainment of cyber security through continual improvement, governance processes, and design and implementation of cyber security systems.
• Information collection, analysis, and reporting to ensure situational awareness.
• Up-to-date knowledge is required in the following cyber security technology areas: Cryptographic technologies including Public Key Infrastructure and key management.
• Identity and access management.
• Network monitoring and detection technologies.
• Segmentation: Boundary protection (firewalls), on-premise and cloud-based equivalents.
• The design of the above cyber security capabilities on cloud infrastructure.
• Cyber Enterprise architect is a cyber security specialist that has a solid knowledge of both the cyber security area, ICT architecture, and how to use architecture to ensure that the applied cyber security supports the business objectives.
• Required Security Clearance: NATO Secret.
• The cyber enterprise architect must have excellent communications skills, spoken and written, being able to clearly explain complicated technical matters to non-technical audiences.
• Further, the cyber security architect must have good organizational, project, and programme management skills, as good leadership and interpersonal skills.