Solution Architect

The Weir Group

Location: Mexico - Monterrey

Purpose of Role: As part of the Group Data & Analytics team, support the Weir business in the establishment and execution of enterprise level design, build, testing and implementation of secure data products. The Group Data & Analytics team supports the needs of the many groups across Weir and will include Analysts, Data Stewards , Data Scientists and peers such as Data and Solution Architects.

Under the direction of the Group Head of Product Management, the Security Architect is responsible for ensuring that the solutions that are developed within the team meet the enterprise level security and standards and policy requirements as set out by the CISO. As a senior member of the, the Security Architect will help to cultivate a culture of security awareness, and arrange continuing oversight and education of personnel to ensure security policies are adhered to at all times.

The role of the security architect demands business insight; technical expertise; and the ability to think, communicate and write at various levels of abstraction.

Why choose Weir:
Be part of a global organization dedicated to building a better future: At Weir, the growing world depends on us. It depends on us constantly reinventing, quickly adapting and continually finding better, faster, more sustainable ways to access the resources it needs to thrive. And it depends on each of us doing the best work of our lives. It's a big challenge - but it is exciting.

An opportunity to grow your own way: Everything moves fast in the dynamic world of Weir. This creates opportunities for us to take on new challenges, explore new areas, learn, progress and excel. Best of all, there is no set path that our people must take. Instead, everyone is given the support and freedom to tailor-make their own career and do the best work of their lives.

Feel empowered to be yourself and belong: Weir is a welcoming, inclusive place, where each individual's contribution is recognized and all employees are encouraged to innovate, collaborate and be themselves. We continually focus on people and their wellbeing. We believe in fairness and choose to be honest, transparent and authentic in everything we do.

Key Responsibilities:

• Review security requirements and assess and identify gaps or improvements
• Define secure design of business, IT, and security solutions.
• Contribute to the alignment of security governance with Enterprise Architecture governance and security portfolio management.
• Security Principles:
• Strong understanding of security principles, policies, and industry-best practices. This includes knowledge of security standards such as OAuth, SAML, SSL, and OpenID Connect.
• API Security: Understanding of API security and how to secure APIs developed using MuleSoft. This includes knowledge of API policies, threat protection, security models, and authentication & authorization mechanisms.
• Networking and Systems Security: A good understanding of networking principles and system security principles is key. This can involve understanding of firewalls, intrusion detection systems, anti-virus software, and data encryption.
• Cloud Security: With MuleSoft's strong presence in cloud integration, knowledge of cloud security principles and technologies, including familiarity with different cloud service providers (like AWS, Azure, Google Cloud) is important.

• Safety First: Demonstrate 100% commitment to our zero harm behaviors in support of our drive towards developing a world class safety culture.

Job Knowledge/Education and Qualifications:

Relevant certification such as Certified Information Security Professional (CISSP)

Experience

• Experience using common security management frameworks, such as National Institute of Standards and Technology (NIST).
• Experience of implementing and validating data and information security architectures for the secure sharing of data with third parties. Experience working within an API-led information architecture and advising on the appropriate security requirements and controls. Experience in working internationally and multi-culturally. Experience of proactive communication to and direct interaction with staff at many levels.

• Familiarity with relevant legal and regulatory requirements, such as the UK Data Protection Act 2018, GDPR, SOC2 etc.
• Data security capabilities such as Digital Rights Management (DRM), secure key management, Data Loss Protection (DLP) and data classification and protection
• Experience in using architecture frameworks such as SABSA, Zachman and/or TOGAF.
• Any knowledge of working with IoT solutions would be beneficial.
• Experience securing CI/CD pipelines.
  
  Founded in 1871, Weir is a world leading engineering business with a purpose to make mining operations smarter, more efficient and sustainable. Thanks to Weir's technology, our customers can produce essential metals and minerals using less energy, water and waste at lower cost. With the increasing need for metals and minerals for climate change solutions, Weir colleagues are playing their part in powering a low carbon future. We are a global family of 11,000 uniquely talented people in over 60 counties, inspiring each other to do the best work of our lives.
  
  For additional information about what it is like to work at Weir, please visit our Career Page and LinkedIn Life Page.
  
  Weir is committed to an inclusive and diverse workplace. We are an equal opportunity employer and do not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, veteran status, disability, age, or any other legally protected status.

#LI-JG1

#LI-JG1