Cyber Security Architect

About the role

The Cyber Security Architect will lead the development and maintenance of baseline cybersecurity policies, standards and controls for Town Councils and related facilities management operations. You will translate security expectations into practical standards, guide vendors and IT officers, and ensure robust incident response capabilities.

Key responsibilities

• Own and maintain baseline cybersecurity policies, standards and minimum security controls across Town Councils.
• Translate cybersecurity expectations into actionable standards for IT officers and vendors.
• Define and maintain governance artefacts such as control checklists and compliance reporting templates.
• Provide guidance on cybersecurity requirements for IT tenders and vendor scopes.
• Coordinate incident response protocols, establish runbooks, and act as escalation point for security events.
• Lead incident triage, containment, and post‑incident reviews, including remediation recommendations.
• Collaborate with external incident response providers and ensure timely mobilisation during major incidents.
• Advise on compliance expectations, conduct risk assessments, gap analysis and remediation planning.
• Support Town Councils and IT officers in audit preparation, evidence collection and governance queries.
• Partner with the IT Service Delivery Manager to operationalise security policies through service processes.
• Liaise with vendors to align on security expectations, reporting and incident coordination.

Required profile

• Proven experience in cybersecurity governance and policy development.
• Strong background in incident response coordination and management.
• Ability to work with multiple stakeholders, including IT officers, vendors and external service providers.
• Experience conducting risk assessments, gap analyses and remediation planning.
• Excellent communication skills to translate technical requirements into practical guidance.

Required skills

• Cybersecurity governance
• Incident response coordination
• Security policy development
• Risk assessment
• Compliance reporting
• Security monitoring
• Baseline configuration management
• Identity security
• Endpoint hygiene
• Access governance