Information Security Architect – Volkswagen Group UK Ltd
Full‑time, permanent. Report into the Chief Information Security Officer. Provide expert advice on selection, design, development, justification and implementation of IT security aligned with business goals, ensuring confidentiality, integrity, availability, accountability and compliance with our risk appetite.
Skills & experience you can bring to the role
* Expert knowledge of Security by Design (including Privacy by Design), Defence in Depth, Attack lifecycle and Secure System Development Lifecycle.
* Detailed knowledge of the latest cybersecurity frameworks and standards and their implementation.
* Extensive knowledge of security at all levels of the OSI model.
* Well‑grounded understanding and experience of networking, infrastructure, middleware and software development.
* Excellent knowledge of IT networking, security infrastructure and modern operating systems.
* Expert understanding of applying security principles and ensuring compliance in IaaS, PaaS and SaaS environments.
* Technical architectural experience, including infrastructure, networking and application.
* Expert knowledge of security principles and technologies as well as risk management and risk methodologies.
* Excellent written and oral communication skills, able to articulate complex IT‑related business issues to senior staff.
* Good commercial awareness of the business impact of Information Security and a pragmatic approach to ensuring it is a business enabler.
* Expert knowledge in the implementation and operation of SecDevOps.
* Good working knowledge of AWS (architecture, services and tools) and how best practice should be implemented and monitored.
* Knowledge of cloud vendor frameworks and cloud technologies.
* Strong knowledge and use of threat modelling frameworks and methodologies.
* Practical experience of designing and developing solutions across large‑scale infrastructures.
* Cloud‑based cyber security principles and architecture points.
* Boundary controls, network segmentation and access control.
* Identity and Access Management (including RBAC, SoD, permissions management).
* Cryptographic techniques and implementations.
* Vulnerability management and patching.
* Serverless, containerisation and virtual machine security.
* Extensive experience of creating and reviewing design documentation.
* Good working knowledge of MITRE ATT&CK.
* Good understanding of ISO27001/2, DPA 2018 / UK GDPR, EU AI Act, EU NIS 2 and relevant standards / legislation.
* Experience of architecting innovative Information Security technology systems in a consumer‑facing sector.
* Experience of security management tools and techniques.
* Securing and leveraging AI.
What we offer you
Competitive salary, car schemes (including cars for family members), discretionary bonus, enhanced pension contributions, private healthcare, 27 days holiday plus bank holidays, 4× life assurance, health & wellbeing support, and a wide range of flexible benefits.
Location
Milton Keynes, England, United Kingdom
Seniority level
Mid‑Senior level
Employment type
Full‑time
Job function
* Information Technology
* Motor Vehicle Manufacturing
#J-18808-Ljbffr