|
KEY ACCOUNTABILITIES & ACTIVITIES
This section describes the principal outputs required from the job.
|
|
Key Accountabilities
|
Key Activities
|
- Security Architecture Review
|
- Conduct security architecture reviews for new and existing systems and solutions.
- Assess solution designs against cybersecurity requirements and standards.
- Document security observations and recommended actions.
|
- Secure Configuration Assessment
|
- Review system, infrastructure, and application configurations against approved security baselines.
- Identify configuration weaknesses and security gaps.
- Support stakeholders in implementing required configuration improvements.
|
- Infrastructure & Cloud Security Review
|
- Assess infrastructure, cloud, and network designs against security requirements and best practices.
- Support the identification of security risks associated with technology architectures.
- Document assessment results and required remediation actions.
|
- Architecture Risk Assessment
|
- Identify and assess cybersecurity risks associated with proposed architectures and technical solutions.
- Evaluate existing security controls and identify potential gaps.
- Recommend appropriate mitigation measures based on identified risks.
|
- Security-by-Design Enablement
|
- Support the incorporation of security requirements during solution design and implementation.
- Collaborate with technical teams to clarify security requirements and controls.
- Verify alignment with security-by-design principles throughout implementation activities.
|
- Security Assessment & Sign-off Support
|
- Perform assigned technical security assessments required for solution approvals.
- Maintain assessment evidence and security review documentation.
- Support security sign-off activities for systems and solutions.
|
- Regulatory Technical Assessment Support
|
- Support technical cybersecurity assessments conducted by regulatory authorities, including NCA-related assessments.
- Coordinate required technical evidence and documentation.
- Follow up on observations and remediation requirements resulting from assessments.
|
- Architecture Security Documentation & Improvement
|
- Maintain architecture security requirements, assessment records, and configuration standards.
- Monitor developments in architecture and cloud security practices.
- Contribute to improving architecture security assessment methods and controls.
|
- Policies, Processes & Procedures
|
- Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.
- Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.
|
- Information Security
|
- Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.
|