Visit our YouTube channel to watch the full series and discover your potential.
Are you passionate about Cyber Security and Enterprise Architecture?
Do you have senior-level experience as a Cyber Security Professional?
Join us to shape the security technology and tooling strategy for HMRC and influence the UK Public Sector. Enjoy a healthy work/life balance while making a significant impact.
HMRC is among the most digitally advanced tax authorities globally, modernizing its IT landscape over the next five years across a Multi-Hybrid Cloud Platform. Working within one of Europe's most complex infrastructures, with significant investments and over 1000 monthly changes affecting over 600 services, security modernization is critical to our success. We are establishing a team of outstanding experts in Security Architecture, Risk Assessment, and Testing to develop and operate these new technology services.
This role offers the chance to work on impactful services affecting millions of citizens and supporting approximately 400 Government Departments and Arms-Length Bodies (ALBs).
Job description
HMRC Security, part of the Chief Digital Information Office (CDIO), supports assessing business and reputational risks within one of Europe's largest IT estates.
Cyber Security Technical Services (CSTS) and the Government Security Centre for Cyber (Cyber GSeC) are key components, ensuring capability development to detect, prevent, and respond to security threats. Our goal is to be recognized as a center of excellence in cyber security, collaborating across government to deliver customer-centric services. This involves evolving consultancy support to meet emerging technologies and threats.
It's an exciting time to join our Cybersecurity and Architecture communities within HMRC and across HMG.
As an Enterprise Security Architect and Principal Cyber Security Professional, you will work within a multidisciplinary team, providing strategic security advice, influencing policy, and developing capabilities through coaching and mentoring. You will promote consistent security architecture across a multi-billion-pound portfolio, including creation and maintenance of security roadmaps, design patterns, and reference architectures to support modern technology adoption.
You may also take on line management responsibilities and own or develop CSTS capabilities and services.
Person specification
Ideal candidates will be business and technology leaders in security controls and services, with stakeholder management experience across senior environments. You should demonstrate a track record of delivering high-value outcomes in complex settings, with the credibility to represent our business in security and architecture communities. Clear communication, knowledge sharing, and a commitment to continuous improvement are essential.
Responsibilities
You will lead and influence security technology strategies, drive transformative change, and set standards aligned with Zero Trust principles. Your role includes creating security roadmaps, establishing baselines, developing design patterns, and supporting enterprise-wide security initiatives. Collaboration across government security teams, research and adoption of new technologies, and stakeholder engagement are key components of this role.
Additional responsibilities involve governance, mentorship, and representing the organization at governance boards, fostering strong relationships across stakeholders, and ensuring security practices evolve with emerging threats.
Essential criteria
Extensive experience or knowledge in stakeholder management, security risks, architectural methodologies (TOGAF, SABSA), security frameworks, and developing security standards and policies. Skilled in applying security controls across multiple domains, including Identity and Access Management, Network Security, Application Security, Data Security, and Cyber Security Operations. Proficiency in technologies like PAM, SSO, encryption, cloud security, and security operations tools is required.
Desirable criteria
Certifications such as CCSP, CISSP, CRISC, Microsoft Cybersecurity Expert, AWS Security, NIST NCSP, ISO27001, and vendor-specific qualifications are desirable. Chartered membership in professional bodies is also advantageous.
Additional information
Candidates must hold or be willing to obtain Security Check (SC) Clearance, which is mandatory for this role.
#J-18808-Ljbffr