As an Information Security Architect you will operate as part of the Information Security Group (ISG). 
The ISG provides Information Security expertise for the organisation, working effectively with organisational functions such as legal, audit and technical support to provide authoritative advice and guidance on the requirements for security controls.

What you will be doing

As an Information Security Architect you will be responsible for assisting the Information Security Manager and the Information Security Lead’s with the implementation of new projects and activities that require Information Security involvement. You will liaise closely with IT Architecture, Technical Services, IT Engineering and delivery teams in order to ensure that we support our business and IT strategies and deliver on our Information Security objectives.

You will have a broad knowledge across all Information Security domains and associated technologies.

You will be subject matter expert and advocate in the areas of security architecture, information security threats and risks, web application security, Amazon Web Services, DEVOPS, compliance and security control frameworks. You will be proactive and be available to support everyone involved in the delivery of our security strategy and risk control objectives.

You will employ techniques such as threat modelling, rapid risk assessment, Failure Mode Effect Analysis or similar to identify probable realistic information security risks and associated controls.

You will consult on, develop, maintain and promote security blueprints and standards to support safe adoption of technologies and implementation of security requirements.

You will work with key stakeholders to identify, assess and priorities information security objectives and requirements at all stages of the delivery

What we are looking for

Essential Criteria:

• Seasoned information security professional; with a SANS/NIST/CIS implementation background. 
• Excellent communication skills, both written and oral
• Excellent problem solving, organisational skills and attention to detail
• Excellent risk and incident management skills – focussed on Information Security
• Excellent Information Security Audit skills and experience
• Excellent experience in a large scale enterprise organisation, preferably a retail or financial organisation
• Excellent knowledge of one or more of the following SABSA, TOGAF, MODAF/DODAF architectural methodology
• Excellent knowledge of software development lifecycles and development and release techniques; Agile, Waterfall etc
• Excellent knowledge of secure coding practices and standards such as OWASP, CERT etc
• Excellent project management skills and experience.
• Good knowledge of applied security controls;
• Good knowledge of NAC, SIEM, FIM controls and systems. 
• Good knowledge of Cobit 5, ISO 27001 and PCI DSS
 

Working within TUI group

TUI UK and Ireland is the UK’s largest tour operator with key brands including TUI, First Choice, Marella Cruises and Crystal Ski Holidays. Sub brands include Sensatori, Sensimar, and Family Life, as well as First Choice Holiday Villages and SplashWorld Resorts. Our airline is the UK’s third largest with 62 aircraft operating to over 88 destinations in 30 countries. We have a team of more than 10,000 employees serving over 5.5 million customers each year. 

It’s our people that make us number one

TUI Group is the leading tourism business with over 67,000 employees across the world. The Group includes our unique hotel portfolio, our cruise ships, our own aircraft, tour operators, travel agencies, and much more. At TUI, we have embarked on a journey of development towards a more digital, connected and integrated future. But we haven’t arrived there yet. Join us now and shape the future of travel.

You can look forward to a competitive salary, pension scheme and further benefits such as generous holiday discounts, great rates with foreign exchange and discounts with retailers.