Devsecops Architect

Description:

Our client is a prestigious boutique investment bank renowned for cross-asset derivatives trading, with a strong emphasis on Commodities and FX trading.

As the DevSecOps | Security Architect within the Technology Team, you will play a pivotal role in safeguarding the firm's digital assets. Reporting into the Head of Architecture, you will have a dotted line to the Head of IT Risk and Cybersecurity.

Your main focus will be the collaboration with application and infrastructure teams to design robust Business and IT solutions that adhere to the agreed minimum security standards and aim for leading security practices.

Your role as the DevSecOps / Security Architect, is essential in transforming the firm's IT landscape to align with, and support the business objectives.

As the DevSecOps / Security Architect, you will lead thorough design processes from strategy conception to delivery. You will collaborate closely with business change and IT delivery functions and develop and enforce robust security architectures. You will drive initiatives that enhance the firm's IT competencies to better serve their business aspirations.

Your key areas of responsibility will be to:

• Develop and maintain a security architecture process that enables the enterprise to develop and implement secure solutions and capabilities that are clearly aligned with business, technology, and threat drivers.
• Define and deliver security architecture governance, ensuring that all IT projects and key initiatives are in alignment with the firm's core security principles and the overall IT strategy.
• Support the application and infrastructure teams in integrating security by design principles into their project lifecycles.
• Provide expertise in security systems and architectures, cybersecurity trends, and emerging threats.
• Lead the development of security architecture and principles. Input into the development and updates of Technology Risk-led standards.
• Work with the Technology Risk team to evaluate and mitigate risks, ensuring that IT frameworks and methodologies incorporate best practices in information security.