Data Security Domain Architect

The Security Architecture team sits within the CTO department. The team is structured in two parts:

Security Enterprise & Domain Architecture – responsible for defining and maintaining the enterprise security capability model and associated security domain architectures and roadmaps

Security Solution Architecture – responsible for defining and maintaining security solution architectures and designs, and supporting development of the enterprise security architecture

The Data Security Domain Architect will work within the Security Enterprise & Domain Architecture team. The role holder will act as the subject matter expert in Data Security concepts, technologies, and best practice. They will be a trusted adviser to the IT and business teams, leading the definition of the Data Security capabilities, and associated strategies and technology roadmaps.

The Security Architecture Team is engaged on all areas of significant IT change in Admiral, such as the design and delivery of major cloud solutions in Azure and GCP, the roll out of new business product lines, customer-facing Digital projects, building out new security technologies, and the creation of Admiral’s Next Gen Architecture.

The Security Architecture Team has people working across Wales, Scotland and England. The team mostly works remotely but we’re a friendly team, with regular team meetings and stand ups throughout the week, and we get together face to face in the office in Cardiff and for offsite meetings when we can.

Role Purpose

The Security Domain Architects are at the heart of shaping and delivering the security technology strategies, architectures and roadmaps. Our aim is to be a trusted partner for the IT and business teams that we support, providing expertise and thought leadership to understand and meet their current and future security needs.

The Data Security Domain Architect will own all aspects of the Data Security architecture. They will shape the architecture, drive its adoption, and be responsible for its continual improvement. They will work across a wide range of stakeholders to build consensus and support for the architecture. They will actively represent Data Security interests in the IT planning and architecture governance processes.

The Data Security Domain Architect will work with the Security Solution Architects to ensure that solutions and reference architectures align with the Data Security architecture. And they will support architects and other IT colleagues to understand and apply the architecture.

Responsibilities

• Engage stakeholders to understand strategic objectives and assess implications for Data Security.
• Create and maintain the Data Security architectures, strategies and roadmaps.
• Continually engage with stakeholders to build consensus and support for Data Security.
• Influence stakeholders and programme teams to implement the Data Security architecture.
• Create artefacts to make it easy for teams to understand and implement Data Security controls.
• Work with Security Architects to ensure solutions are aligned to the Data Security architecture.
• Act as an escalation point to pragmatically resolve challenges arising from the architecture.
• Actively represent Data Security requirements in enterprise architecture governance processes.
• Provide trusted Data Security subject matter expertise and advice.
• Maintain a current view of the Data Security architecture, using standard tooling and practices.
• Work with the rest of Security Architecture to continually improve our processes and outputs.
• Coach IT and security colleagues to understand and apply the Data Security architecture.

Who are we looking for?

We take on many different roles within IT, but we consistently look for people who are: -

• Happy to take ownership of challenges and lead the way in overcoming them.
• Passionate about what they do.
• A continual learner (forever inquisitive for self-improvement).
• Self-motivated.
• Delivery-focused.
• Positive and a great team member.
• Articulate in describing technical topics for non-technical audiences.
• Comfortable interacting with audiences up to senior management level.

Requirements / Technologies

We would like to hear from candidates who can fulfil most of the following criteria: -

• Expert knowledge of security frameworks and practices, with a strong technical grounding.
• Experience of working in security architecture/strategic decision-making roles.
• Experience of architectural governance, standards, and methodologies.
• Drive and enthusiasm for the business benefits of security architecture methods.
• Proven track record of solving complex and challenging security problems.
• Excellent communicator, comfortable with audiences up to and including C-level managers.
• Strong technical experience in one or more areas of Data Security, such as…
• Data discovery
• Data classification
• Data confidentiality
• Data integrity
• Data loss prevention
• Data encryption / tokenisation
• Data availability
• Data access monitoring
• Data lifecycle management

We are particularly keen to hear from candidates who meet one or more of the following criteria: -

• Security experience in one or more of the major cloud platforms (Azure, GCP, AWS).
• Experience of working in large organisations in regulated sectors.
• Certification in architecture frameworks (eg., SABSA, TOGAF).
• Security certifications such as CISSP, CISM, etc.
• Experience of working in Scaled Agile / DevSecOps environments.

About Admiral

We're Wales’ only FTSE 100 company. We have forward-thinking approaches and provide endless opportunities to test, learn and grow. 

Admiral has grown from being a small start-up into a multi-national organisation. The company is constantly investigating new products, services and markets and is now present in eight countries with a diverse product portfolio.

Our success goes hand-in-hand with having a strong culture where we put our people and customers first. Our philosophy is simple yet effective: people who like what they do, do it better, and this, in turn, means that our customers receive the level of service and products that they deserve. Our culture is honest, open and wholeheartedly focused on four key areas: Communication, Equality, Reward & Recognition, and Fun.

Salary, Benefits and Work-Life Balance

We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we have consistently been voted one of Sunday Times Best Big Companies to Work For in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.

You can also view some of our other key benefits here; https://admiraljobs.co.uk/employee-benefits/.

Interviews

CVs will be reviewed as soon as we can and interviews will typically be arranged the following week.

#LI-CH1