NATS is the UK’s leading air navigation service provider, handling over two million flights each year. It provides air traffic control services from two control centres supporting airports nationally, and commercial solutions to over 30 countries globally. Our people are at the heart of our purpose to advance aviation and keep the skies safe.
Job Purpose/Overview:
We are progressively evolving our systems, digitally transforming and integrating them to address future airspace management opportunities and challenges. We are looking for a Security Architect to join our central Cyber Risk and Information Security team. This role will help shape and drive our security strategy and will develop architecture and designs to support NATS’ overall business strategy.
Duties:
- Lead the definition and modelling of security architecture for current and future capabilities to identify areas for improvement and guide Service Designs and comply with corporate, legislative, contractual or regulatory requirements.
- Find and direct pragmatic approaches for the security architecture to match business needs and adhere to broader reference architectures.
- Lead the identification, development, and management of security architecture principles, policies and standards to ensure design, development, implementation and operating boundaries.
- Provide and lead consultancy on security architecture to broader NATS teams so they can adhere to the strategy & architecture.
- Create and communicate baseline security requirements to ensure consistency in designs and supplier contracts.
- Ensure that all security architecture-related knowledge is digitised and readily accessible for use by other teams.
- Attend governance boards to guide and advise product and service designers to align designs to architecture strategy, principles, policies and standards.
- Lead the identification of strategic and emerging security technology capabilities and engage with external partners for innovative, improved or better fit opportunities for NATS.
Essential skills and experience:
- An accomplished, credible and respected subject matter expert with well-developed communication, influencing and negotiation skills.
- Able to assimilate and consider issues from the technical, contractual and business perspective, supported by a pragmatic attitude to implementing security in a complex and diverse organisation.
- Able to articulate complex issues and concepts to a wide range of recipients, in plain English, both written and verbally.
- Collaborative working style with a clear focus on delivering outcomes.
- Demonstrable experience in cloud architectures and operational technology.
- Experience in systems delivery including analysis, design, implementation, testing and support.
- Experience of threat modelling and how it can be applied effectively to designs.
- Good working knowledge of an Information Security Management System and the ISO2700x / Cyber Essentials series of standards.
- Ideally certified to CISSP, CISM, CISA, CRISC, CCISO or equivalent professional certification.
- Relevant architectural experience, including an understanding of NIST, SABSA, TOGAF or equivalent frameworks.
Additional vacancy information:
We are proud to offer a fantastic total reward package to help you thrive both personally and professionally. We have adopted agile working to provide flexibility and choice over working arrangements, with the opportunity to work in our modern office facilities as well as remotely. We welcome discussions on flexible and part-time working arrangements. Find out more here.
If you share our passion to advance aviation and keep the skies safe – we would like to hear from you whatever your age, sex, race, faith, sexual orientation, gender identity, gender expression, visible or invisible disability. Individuals that bring different perspectives, skills, life experiences and backgrounds help us be at the forefront of our industry.
