Description
The Cybersecurity Architecture Reviewer is responsible for conducting security architecture assessments for applications, platforms, cloud services, infrastructure, and technology solutions to ensure alignment with enterprise security policies, architectural standards, and industry best practices.
Key Responsibilities
- Conduct cybersecurity architecture reviews for new and existing applications, platforms, cloud services, and technology solutions.
- Review cloud, on-premises, hybrid, and third-party integrations to ensure secure architectural design and connectivity patterns.
- Assess solution designs, architecture diagrams, data flows, technical documentation, and technical requirements from a security perspective.
- Review firewall and network access requests to validate compliance with approved architectures, security standards, and business requirements.
- Evaluate security controls, including authentication, authorization, encryption, logging, monitoring, and data protection mechanisms.
- Partner with Solution Architects, Engineering Teams, and Project Teams to embed security requirements into solution designs and development initiatives.
- Perform firewall policy reviews across traditional, next-generation, and virtualized firewall platforms.
- Design, implement, and support firewall governance processes, including rule recertification, change management, audit traceability, and exception management.
- Design and assess secure connectivity patterns aligned with enterprise security principles, architectural standards, and regulatory requirements.
- Provide security recommendations, architectural guidance, and risk mitigation strategies based on industry best practices and organizational standards.
- Support governance activities, including periodic access reviews, firewall rule recertification, security exception reviews, and compliance assessments.
- Operate and maintain metrics, dashboards, and reporting to measure the effectiveness and efficiency of the Security Architecture function.
- Document security findings, risks, recommendations, and review outcomes, ensuring effective stakeholder communication and remediation tracking.
Required Skills & Experience
- Strong understanding of cybersecurity architecture principles and secure solution design practices.
- Experience reviewing cloud environments (AWS, Azure, GCP), on-premises infrastructures, and hybrid architectures.
- Knowledge of network security technologies, including firewalls, proxies, VPNs, network segmentation, and secure remote access solutions.
- Experience with firewall platforms such as Palo Alto, Check Point, Fortinet, Cisco FMC/FTD, VMware NSX, or equivalent technologies.
- Strong understanding of authentication protocols, Identity and Access Management (IAM), encryption technologies, PKI, and key management.
- Experience conducting threat modelling, risk assessments, and security architecture reviews.
- Understanding of API security, SaaS security, vendor risk management, and third-party connectivity assessments.
- Familiarity with security frameworks and standards such as NIST CSF, ISO 27001, CIS Controls, OWASP, and Zero Trust Architecture.
- Strong analytical, stakeholder management, communication, and influencing skills.
- Ability to translate technical risks into business-focused recommendations.
Benefits
- LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days, and wellbeing initiatives.