Address
SalaryA Security Designer is responsible for designing, building, testing and implementing security systems within an organisation's IT network. The Security Designer is expected to have a thorough understanding of complex IT systems and stay up to date with the latest security standards, systems and authentication protocols, as well as best practice security products.Key accountabilities:
- Co-ordinate design activities, promoting the discipline to ensure digital security.
- Evaluate new services, vendors, applications and security tools, from a security perspective and architectural fit
- Document data flows of sensitive information within the organization (e.g., PII) and recommend controls to ensure this data is adequately secured (e.g., encryption, tokenisation, etc.).
- Provide guidance on the development of solution components to ensure they take into account developments and changes in the digital business and threat environments and are secure by design.
- Review security technologies, tools and services, and make recommendations to the broader security team for their use based on security, financial and operational metrics.
- Contribute to the design from Infrastructure environments.
- Identify security gaps and provide controls to mitigate them. Escalate any risks to the risk analyst.
- Provide security and technical risk perspective for solutions drafted and advise on solutions to improve the security posture.
- Design security controls in AWS Infrastructure, Salesforce and IBM Cloud environments.
- Review security controls in the Salesforce and AWS environment.
- Monitor the security controls in the Salesforce and AWS environment.
- Provide security support for the AWS infrastructure.
- Participate in AWS change management.
- Develop advanced security controls for the AWS environment.
- Accountable for creating and capturing accurate and complete records of the business activities related to this position, in accordance with approved policy and procedures. This is applicable to both hardcopy and electronic information, including email
- Significant experience in a similar role, recognising and exploiting business opportunities provided by integration technologies to ensure more secure solutions for the organisation.
- Demonstrated ability to work independently and collaboratively to manage end-to-end support and resolution processes for assigned tasks through in-depth analysis, review and application of expert knowledge.
- Customer service focus and an ability to work under pressure in a multifaceted technical environment managing complex issues utilising innovative approaches and best practice.
- Demonstrated ability to engage and influence external providers to deliver services that meet the business strategic outcomes in a safe and secure manner.
- Highly developed interpersonal, verbal communication, influencing and negotiation skills, with strong customer focus and ability to understand issues, manage expectations, gain agreement, resolve conflicts and translate security architecture and technical information into language that is comprehensible to the business.
- Experience in enterprise application systems analysis and development, including: analysis, design, development, testing, implementation, documentation and support with a thorough understanding of the Service Delivery Lifecycle.
- Experience in application support and lifecycle management, deployment management, environment configuration and software development lifecycle methodologies, tools and systems, including but not limited to; ITIL, DevOps, Agile, Scrum, Continuous Delivery and/or Rapid Application Development.
- CISSP
- CISA
