Barclay Simpson Recruitment

We are seeking an experienced Cyber Recovery Security Architect to support a major cyber resilience and recovery programme within a complex enterprise environment. This role will play a critical part in defining, validating, and testing enterprise cyber recovery capabilities, ensuring recovery processes, technical dependencies, and governance frameworks are fit for purpose and aligned with organisational resilience objectives. The Opportunity As part of a strategic cyber recovery initiative, you will work closely with technology, security, architecture, and business stakeholders to design and validate recovery capabilities for critical services and data. You will lead technical workshops, challenge recovery assumptions, and provide assurance over recovery plans and processes. The programme is focused on delivering: Enterprise Data and Service Loss recovery playbooks, tested against realistic threat scenarios Clearly defined cyber recovery roles, responsibilities, and accountabilities A robust Cyber Recovery Assurance process operating across the organisation Key Responsibilities Support the planning, facilitation, and execution of Cyber Recovery workshops across multiple product groups Review, challenge, and help define technical recovery plans for critical services and applications Validate technical recovery assumptions and recovery strategies Assess and document application recovery architectures and technical interdependencies Work closely with Product Group Architects and technical teams to ratify recovery approaches Contribute to the development and testing of recovery playbooks for Priority 1 data and service loss scenarios Identify process, tooling, governance, and operational gaps within recovery processes Provide technical assurance and validation of recovery outputs prior to publication within Cutover Support cyber recovery proof-of-concept activities and future automation initiatives Required Experience Strong background in Cyber Security, Cyber Resilience, Disaster Recovery, or Operational Resilience Experience designing, assessing, or assuring cyber recovery and service recovery processes Ability to challenge technical recovery plans and validate complex recovery scenarios Experience identifying and mapping technical dependencies across enterprise environments Strong stakeholder management skills with the ability to facilitate technical workshops Experience working within large-scale enterprise environments Familiarity with recovery orchestration, operational readiness, and resilience testing Essential Knowledge Strong understanding of cyber recovery frameworks and best practices Good understanding of application architecture, infrastructure, and recovery dependencies Experience working with business, security, infrastructure, and architecture stakeholders to define recovery outcomes

Security Consultant required to mature CrowdStrike security assurance across AWS and Azure within a highly regulated enterprise environment. CrowdStrike has been deployed as part of a security uplift programme, but assurance processes and capabilities require further development. The SME will assess the current position, identify gaps and improve how security findings are managed through remediation and closure. Key Responsibilities Assess and improve CrowdStrike assurance capabilities across AWS and Azure. Identify gaps in cloud security coverage, configuration and assurance processes. Improve management of misconfigurations, false positives, exceptions and mitigating controls. Establish clear remediation and finding life cycle processes. Assess attack-path visibility across Azure and AWS, including gaps between CrowdStrike and Microsoft Defender. Evaluate CrowdStrike alongside native AWS/Azure security tooling and other assurance capabilities. Improve cloud asset context and ownership by mapping accounts/resources to product groups and Prod/Dev/Test environments. Explore integration with CMDB and asset-management tooling. Help develop consolidated, single-pane-of-glass security assurance and reporting. Key Experience Strong hands-on CrowdStrike experience, ideally cloud security/CSPM/exposure management. Strong AWS and Azure security knowledge. Experience with Microsoft Defender for Cloud. Cloud security assurance, posture management and misconfiguration remediation. Security finding life cycle, false-positive and mitigating-control management. Cloud asset mapping and CMDB integration. Experience operating within regulated, risk-averse enterprise environments. Ideal profile: A technically strong cloud security SME who can quickly assess the current CrowdStrike implementation, identify overlooked gaps and deliver pragmatic improvements to cloud security assurance.