Director Security Architecture & Consulting

As Director, Security Architecture and Consulting, the candidate will have end-to-end responsibility for AVEVA's security architecture practice. The candidate will report to the SVP Digital Security (CISO) and will lead a global team of security architects and consultants responsible for evaluating security controls and recommending security solutions in alignment to our cyber strategy and risk tolerance. The role will require occasional international travel to ensure cohesion and a shared vision across the security profession within AVEVA.

The candidate will form part of the SVP Digital Security's (CISO) leadership team and will work closely and collaboratively with all CISO first reports, the Head of Product Security, the Enterprise Architecture Team and relevant AVEVA tech professionals. Excellent interpersonal communication is essential for this role in order to engage with senior contacts across the business. These regular engagements will drive the identification of requirements which will enable effective controls to be securely designed into our platforms, products, and capabilities.
The cyber security solutions architected by this team will underpin the security of the global product suite. Therefore, this candidate must be a senior technology leader with proven experience in architecting secure by design solutions. Experience of working with product development teams would be advantageous.
Responsibilities

• Lead, direct, and develop a team of multi-disciplined security architects and consultants, including varying levels of staff in a matrixed, virtual environment, while sustaining team energy, wellbeing, and resilience.


• The candidate will sensitively build relationships with Business Units to fully understand their security needs. Gaining the confidence of business leaders and customers by prioritizing their needs.


• End to end ownership of security architecture and secure by design principals in close collaboration with Product Security.


• Utilizing a deep understanding of future technology and consequent business changes on the horizon, the leader will translate these into security solutions which will require interaction with senior tech executives and stakeholders across the organization.


• Contribute to research in emerging cyber solutions and strategies.


• Contribute to the proactive identification of security design gaps in existing or new systems and recommend mitigations.


• Contribute to ensuring that the principles of secure by design are integrated into the Business Governance and Enterprise Architecture Group to firmly embed secure design & development practices across the company.


• Partner with security engineering and platform support engineering to set the course for secure development practices for existing and future security solutions.


• Act as an ambassador for AVEVA, interacting with relevant government agencies and policy groups to ensure effective working SME relationships in the event of sudden changes in the threat environment, regulatory changes or proposed changes and other high-profile events.


• Partner and build strong relationships with Product Security to align strategy and enable the business.
  
  The candidate must have extensive and proven experience in the architecture of secure solutions.


• 10+ years in security architecture preferably within CNI


• Knowledge of legal and/or regulatory matters in the context of enterprise security.


• Understanding of DevOps/DevSecOps.


• Experience of securing Operational Technology and a solid understanding of IEC 62443 and corresponding NIST Standards.


• Experience working in a regulated environment such as NIS.


• Ability to work in a complex and fast paced environment.


• Ability to write, develop, and maintain technical documentation, including reference architecture and implementation plans.


• Experience in the implementation of cyber solutions and standard methodologies.


• Extensive know-how of security technology including, but not limited to, authentication and authorization, security protocols, cloud security, AI/ML.


• Deep understanding of enterprise architecture and security frameworks like TOGAF, NIST, CIS, etc.


• Knowledge in the business principles of secure system design and experience of modern design techniques including simulations.


• Strong written and verbal communications skills and proven experience in conveying direction effectively and clearly to both highly technical and non-technical audiences, including senior leadership.


• Ability to work across boundaries, both organisationally and geographically.


• Computer Science Degree or similar.


• Achieved CISSP
  
  Aveva


London, England

AVEVA is a global leader in industrial software. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life - such as energy, infrastructure, chemicals and minerals - safely, efficiently and more sustainably.
We're the first software business in the world to have our sustainability targets validated by the SBTi, and we've been recognized for the transparency and ambition of our commitment to diversity, equity, and inclusion. We've also recently been named as one of the world's most innovative companies.
If you're a curious and collaborative person who wants to make a big impact through technology, then we want to hear from you! Find out more at https://www.aveva.com/en/about/careers, AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business.

Come and join AVEVA to create the transformative technology that enables our customers to engineer a better world.