Cyber Security Architect at the UK Intellectual Property Office (IPO Secure team), shaping security strategy, architecture roadmaps and Secure by Design across on-premises, cloud and hybrid platforms. Focus on compliance with PCI DSS, ISO 27001, NCSC CAF/GovAssure, plus advising teams on identity, Zero Trust and threat modelling.
Compensation
£47.8K–£58.9K / yr
Location
Newport, NP10 8QQ
Work setup
Hybrid
Seniority
Not specified
Employment
Part time
Experience
5+ years
Category
Security
Posted
Skills
authentication
cloud
cryptography
cybersecurity
gdpr
iam
iso-27001
networking
pci-dss
sdlc
threat-modeling
zero-trust
Must have
Broad technical knowledge around cloud and hybrid technologies, identity management and application security
Solid understanding of security protocols, networking, identity management, authentication, authorisation and cryptography
Knowledge of secure development practices and the SDLC
Experience of technical Security Architecture
Knowledge of Zero Trust principles including NCSC guidance
Experience adopting Identity and Access Management principles in hybrid environments
Solid understanding of Governance, Compliance and Risk, and the CIA triad
Excellent communication and interpersonal skills, able to engage technical and non-technical stakeholders
Knowledge and experience of using Threat Modelling techniques
Capable of evaluating options and making decisions quickly and effectively
Team player who collaborates with stakeholders of all levels
Sense of urgency — addresses situations, incidents or tasks proactively and promptly
Keeps abreast of emerging security technologies, threats and trends; self-motivated learner
Must pass disclosure and barring check and hold or obtain higher Security Clearance, requiring 5+ years consistently living in the UK
Full description
Job grade: Senior Executive Officer
Contract type: Permanent
Business area: IPO - DDaT
Type of role: Digital, Governance, Security
Working pattern: Flexible working, Full-time, Part-time
Number of jobs available: 1
Location
Newport, NP10 8QQ
About the job
Job summary
Cyber Security Architect
The Security Architect works closely with the Chief Security Officer, Head of Cyber, Lead Security Architect and the wider security team to develop an IPO vision for security and evolution of the security strategy and supporting roadmaps.
The role of IPO Security Architect is part of the IPO Secure team at the Intellectual Property Office. Playing a key part in an established team, the individual is responsible for ensuring the continued compliance with key security standards, such as PCI, ISO27001, secure by design, GovAssure etc.
It is essential that this role ensures that security architecture alongside compliance are understood and therefore the role will include championing security by design.
The Security Architect is essential in shaping security solutions and controls across multiple platforms (on-premises, cloud, hybrid) providing oversight, support, and advice to enable technical teams to make security decisions.
They ensure that common tools and patterns are used effectively to deliver secure systems, whilst implementing proportionate controls to enable positive business outcomes thereby safeguarding the IPO’s data, essential services and the supporting infrastructure.
They ensure Secure by Design principles are adopted, and coordinate on assurance against the National Cyber Security Centre’s Cyber Assessment Framework with the Government’s GovAssure framework.
Working Style
This role will be carried out in-line with IPO Hybrid working arrangements where staff are currently expected to spend at least 20% of their time working onsite from one of our offices. This role is based in our NewportOffice.
The requirement for attendance at an office location can vary by role so we would encourage candidates to discuss working arrangements with the recruiting manager to agree a reasonable balance between working from home and the office.
The IPO holds a visa sponsor licence however; this role is not eligible for sponsorship under the Skilled Worker route. Candidates will therefore need to have an existing right to work in the UK at the time of application.
Job description
Main duties consist of but are not limited to:
Ensure security architecture aligns with wider Gov security policies and frameworks, legal frameworks, industry regulations and best practise (e.g ISO 27001, NCSC Standards, GDPR, PCI DSS, GovAssure, Secure by Design)
Support the secure by design champion in building awareness and understanding of secure by design framework across DDaT.
Develop and manage the security architecture roadmap, ensuring activities are organised and planned in with relevant teams in an efficient manner, ensuring it aligns closely with the IPO Secure Team’s strategic direction and any recommendations from audits
Continuously keep up to date with changing compliance legislation and initiatives to assess new opportunities for educating colleagues on relevant security standards.
Recommend security controls and identify security solutions that support business objectives.
Provide expert security guidance and direction during the design, implementation and use phases of systems, applications and infrastructure.
Provide specialist advice and recommendations regarding approaches and technologies across teams and various stakeholders, assessing the risk associated with proposed changes.
Inspire and influence others to execute security principles, communicating widely with other stakeholders.
Assist, where necessary, with incident response processes to identify architectural issues and solutions.
Proactively engage with internal and external partners, stakeholders and peers to develop your knowledge and inform your decisions
You will be expected to carry out any other duties that may reasonably be required in line with your main duties.
Person specification
Essential Criteria:Essential Technical
Broad technical knowledge, especially around cloud and hybrid technologies, identity management and application security.
Solid understanding of security protocols, networking, identity management, authentication, authorisation, and cryptography.
Knowledge of secure development practices and the Software Development Lifecycle (SDLC)
Experience of technical Security Architecture.
Knowledge of Zero Trust principles including those from NCSC.
Experience with adoption of Identity and Access Management principles in hybrid environments.
Essential Experience
Solid understanding of Governance, Compliance and Risk, and the Confidentiality, Availability, and Integrity (CIA) triad.
Excellent communication and interpersonal skills. Ability to interact with stakeholders of all levels to effectively articulate security controls, solutions, and advice. Capable of switching between technical and non-technical language.
Knowledge and experience of using Threat Modelling techniques.
Capable of evaluating options and making decisions quickly and effectively.
A team player who is enthusiastic about contributing to the overall success of the team and collaborating with stakeholders of all levels.
Sense of Urgency – ability to address situations, incidents or tasks proactively and promptly
Continually stay abreast of emerging security technologies, threats and trends. Self-motivated to drive their learning needs.
How to Apply
Click the 'Applynow' button and complete the application form by providing the following:
Your CV
Upload an anonymised copy of your current CV. Please remove all identifying markers such as name, title, education institution etc.
Make sure it clearly shows how you meet the essential criteria listed in the Person Specification.
500 Word Personal Statement
Make sure to provide clear examples to show how you meet each of the following requirements:
Solid understanding of Governance, Compliance and Risk, and the Confidentiality, Availability, and Integrity (CIA) triad.
Solid understanding of security protocols, networking, identity management, authentication, authorisation, and cryptography.
Capable of evaluating options and making decisions quickly and effectively.
Continually stay abreast of emerging security technologies, threats and trends. Self-motivated to drive their learning needs.
Technical
Provide a 250-word example that demonstrates your technical skills covering the following:
Broad technical knowledge, especially around cloud and hybrid technologies.
For further information on the sift and interview stages of this recruitment campaign, please head to our 'Things you need to know' section below.
Please visit our Civil Service Careers page - **IPO – Recruitment Support , Civil Service Careers (civil-service-careers.gov.uk)If you require job-specific information, please contact: Alex Morgan E-mail: Alex.Morgan@ipo.gov.uk Telephone: 01633 814514
Behaviours
We'll assess you against these behaviours during the selection process:
Leadership
Changing and Improving
Making Effective Decisions
Technical skills
We'll assess you against these technical skills during the selection process:
Provide a 250-word example that demonstrates your technical skills covering the following:
Broad technical knowledge, especially around cloud and hybrid technologies
Benefits
Alongside your salary of £47,766, Intellectual Property Office contributes £13,837 towards you being a member of the Civil Service Defined Benefit Pension scheme.
Find out what benefits a Civil Service Pension provides (opens in a new window).
A flexible working scheme with excellent development opportunities
25 days annual leave moving to 30 days in annual increments (1 day per year) over 5 years of reckonable service. You will also get 8 days public leave and 1 day privilege leave
Family friendly policies that support modern working families and individuals with caring responsibilities
A variety of support functions; Staff Counselling Service, Peer to Peer Support Group
Eligibility for special and office-wide bonus payments
The opportunity to form part of our many inclusive network groups, find out more by looking at Intellectual Property Office (IPO) (diversityjobsgroup.com)
A range of wellbeing initiatives; Onsite Gym (Newport office), Eye Care Scheme, Volunteering Programme, Cycling facilities
Free car parking is available on site at our Newport office
On-site shop, restaurant and coffee shop at our Newport office
For more information about what’s on offer at the Intellectual Property Office please review our IPO benefit pack attached to the bottom of this advert.Please note that benefits may be subject to change.
Things you need to know
Artificial intelligence
Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use.
Selection process details
This vacancy is using Success Profiles (opens in a new window), and will assess your Behaviours, Experience and Technical skills.
Additional details on security and vetting
Successful candidates must pass a disclosure and barring security check and if successful you must also hold, or be willing to obtain, a higher Security Clearance.
For meaningful checks to be carried out individuals will need to have lived in the UK for a sufficient period of time, depending on the level of clearance, to enable appropriate checks to be carried out and produce a result which provides the required level of assurance. For this role the successful individual will need to have consistently lived in the UK for a minimum 5 years in order to meet the relevant security clearance.
Further information on the vetting process can be found at National security vetting: clearance levels - GOV.UK
If you have questions regarding this or are unsure if you meet the eligibility criteria, please contact Recruitment@ipo.gov.uk
The assessment process will comprise of the following:
Stage 1 – Sift
An initial sift of applications will be carried out to create a shortlist. This will be based on the evidence provided for the following Success Profile elements:
Experience
Your CV will be used to assess your suitability for the role and your 500 word Personal statement will demonstrate your Experience against the listed essential criteria.
Technical
Provide a 250-word example that demonstrates your technical skills covering the following
Broad technical knowledge, especially around cloud and hybrid technologies.
Stage 2 – Pre Interview Phone Call
If successful at sift, candidates will then be invited to a pre interview phone call where you will be assessed on your Experience.Stage 3 – Interviews
If invited to interview Behaviours and Technical based questioning will be used.
Please note candidates that proceed to the interview stage will be required to deliver a presentation against the Technical Success Profile. Further details will be provided in the invite to interview information.
Specific information regarding the Success Profile elements that will be assessed at interview will be contained within the interview invitation.
Interviews for this role will be carried out in person at our Newport Office.
This recruitment campaign will keep a reserve list for 12 months. If you meet the requirements for this role but aren't offered after passing the interview, you'll be placed on the reserve list. If a suitable position opens up during this time, we will reach out to individuals in merit order.
The successful candidate would be expected to remain in the role for a minimum of 12 months before applying for another role.The Recruitment team operational hours are 09:00 to 17:00 Monday – Friday excluding bank holidays.Please note that the role profile is for information purposes and candidates should refer to the specific assessment criteria referred to in the job advertApplicants to note: CVs sent direct to the IPO will not be accepted.
There may be important information contained within the job role profile candidates may also wish to refer to. We recommend candidates download and save a copy of the role profile for reference.
This post is being advertised to Internal, acrossGovernment and external candidates at the same time.
Incomplete and/or late submissions will not be accepted or considered. Feedback will only be provided if you attend an interview or assessment.
We do not routinely reimburse travel expenses for candidates, however if participating in the selection process would cause you undue financial hardship or if it restricts your ability to participate, please contact the recruitment team for more information.
In line with Government guidance, successfully appointed candidates will need to provide documents for our Right to Work checks. Information on this will be sent within the invite to interview text.
If you require a reasonable adjustment at any stage of the recruitment process, then please let the recruitment team know via;recruitment@ipo.gov.uk
In the event of a high volume of applications, the Intellectual Property Office (IPO) reserves the right to raise the minimum qualifying score at sift to manage volumes and ensure a proportionate and fair assessment process.Please be aware that only one application per candidate is permitted for each recruitment campaign. Multiple applications, including those made using different accounts, may result in your application being withdrawn or rejected at any stage of the process.For more information on the IPO’s terms and conditions, please review the attached IPO Modernised Terms and Conditions document attached at the bottom of this advert.
Feedback will only be provided if you attend an interview or assessment.
Security
Successful candidates must undergo a basic (or equivalent) criminal record check.
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check (opens in a new window).
See our vetting charter (opens in a new window).
People working with government assets must complete baseline personnel security standard (opens in new window) checks.
Nationality requirements
This job is broadly open to the following groups:
UK nationals
nationals of the Republic of Ireland
nationals of Commonwealth countries who have the right to work in the UK
nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) (opens in a new window)
nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)
individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020
Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service
Further information on nationality requirements (opens in a new window)
Working for the Civil Service
The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.
Diversity and Inclusion
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the
Civil Service People Plan (opens in a new window) and the
Civil Service Diversity and Inclusion Strategy (opens in a new window).
Apply and further information
This vacancy is part of the Great Place to Work for Veterans (opens in a new window) initiative.
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.
Contact point for applicants
Job contact :
Name : IPO Recruitment team
Email : recruitment@ipo.gov.uk
Recruitment team
Email : recruitment@ipo.gov.uk
Further information
Commissioners Statement
The Civil Service recruits by merit on the basis of fair and open competition as outlined in the Civil Service Commission’s Recruitment Principles.
Complaints Procedure:
If you feel your application has not been treated in accordance with the Recruitment Principles and you wish to make a complaint, please contact;
Penny Phillpotts
Intellectual Property Office,
Concept House,
Cardiff Road,
Newport,
NP10 8QQ.
If you are not satisfied with the response you receive from the Department, you can contact the Civil Service Commission at: http://civilservicecommission.independent.gov.uk/civil-service-recruitment/complaints/
Attachments
IPO Cyber Security Architect Role Profile Opens in new window (docx, 176kB) IPO Modernised Terms and Conditions Opens in new window (doc, 149kB) What's on offer at the IPO Opens in new window (pdf, 2034kB)