Location: Hybrid (Central London)
Key Responsibilities
Leads in requirements gathering, threat modelling, planning, development, and implementation of data and system security controls and practices.
Analyses risks in current environments and develop suitable strategies to address identified risks.
Conduct gap analysis between current and target security architecture and develops and implements roadmaps and plans to close gaps.
Develop, communicate and implement a suitable security management solution based on ISO/IEC 27001 and NIST 800-53.
Consults on security direction, maintaining oversight over assurance of the information security management system and information systems assets.
Cooperates with Rackspace and Customer Security Operations in regards to implementing recommend corrective actions.
Supervise activities in support of security professionals that provide information technology services within Rackspace Sovereign Services.
Provide Customer guidance for Cyber Assessment Framework and DSPT toolkit.
Supervise tasks throughout the system development lifecycle to ensure information security is embedded from the outset, and is a fundamental element of secure architecture
Integrate guidance on mandatory and recommended controls, to ensure they are appropriately implemented and maintained.
Collaborate with project teams to interpret any vulnerabilities found during certification processes; help define mitigating controls and design plans for remediation, or alternatively assist with the exception process.
Informing Technical Support teams of appropriate security baselines for security devices within the technology environment (IDS/IPS, firewalls, VPN, operating systems, BYOD, etc.)
Advise in the development of the security product strategy and roadmaps for the various internal and customer facing security offerings.
Highly Preferred Knowledge
Experience of security requirements facing NHS trusts or other regulated industries within the UK
ISO/IEC 27001 implementation and audit management
Required Skills/Experience
5 years+ experience at enterprise architect level (preferably in a regulated sector)
Enterprise Risk Management
Enterprise Cyber Security Architecture
NCSC Secure by Design Guidance
NCSC Cyber Assessment Framework
Cabinet Office Security Policy Framework
Certifications
ISSAP – highly preferred
CISSP – highly preferred
CRISC or equivalent – preferred
Industry recognised certification e.g. SC-10
- #LI-LP2
- 




- About Rackspace Technology
Rackspace Technology is the trusted operator of the full enterprise AI stack, from governed private cloud to AI inference and agents in production. From edge to core to cloud, we operate the infrastructure, data layer, and software integration to deliver business outcomes with the predictable cost, reliability, security, and compliance that regulated and mission-critical environments demand. We support customers in more than 120 countries with AI capabilities spanning private cloud, public cloud, applications, data and cyber resilience.
More on Rackspace Technology
Though we’re all different, Rackers thrive through our connection to a central goal: to be a valued member of a winning team on an inspiring mission. We bring our whole selves to work every day. And we embrace the notion that unique perspectives fuel innovation and enable us to best serve our customers and communities around the globe. We welcome you to apply today and want you to know that we are committed to offering equal employment opportunity without regard to age, color, disability, gender reassignment or identity or expression, genetic information, marital or civil partner status, pregnancy or maternity status, military or veteran status, nationality, ethnic or national origin, race, religion or belief, sexual orientation, or any legally protected characteristic. If you have a disability or special need that requires accommodation, please let us know.
