Lead Consultant

**JOB TITLE: LEAD CONSULTANT**:**CAREER LEVEL: E**:**Leverage technology to impact patients and ultimately save lives****ABOUT ASTRAZENECA**:AstraZeneca is a global, science-led, patient-focused biopharmaceutical company that focuses on the discovery, development and commercialisation of prescription medicines for some of the world’s most serious disease. But we’re more than one of the world’s leading pharmaceutical companies. At AstraZeneca we’re dedicated to being a Great Place to Work.**ABOUT OUR IT TEAM**:It’s a dynamic and results-oriented environment to work in - but that’s why we like it. There are countless opportunities to learn and grow, whether that’s exploring new technologies in hackathons, or redefining the roles and work of colleagues, forever. Shape your own path, with support all the way. Diverse minds that work cross- functionally and broadly together.**ABOUT THE ROLE**:**Job Description / Capsule**AstraZeneca are a global, science-led biopharmaceutical business whose innovative medicines are used by millions of patients worldwide. We are increasing our focus on growth through innovation - being more patient-centric, doing more with technology, digital and data, and advancing more cutting-edge science. Our key principals include:- ** Accelerate innovative science **- Advancing high-potential late-stage pipeline projects, pursuing the next wave of disruptive biology and accelerating efforts in ML & AI, Data Science and Digital Technology- ** Deliver growth and therapy area leadership **- Driving growth, impacting and improving the whole patient journey and collaborating with the funders of healthcare and third parties.The focus on Digital, AI & ML, Data & Data Science along with joint ventures and collaboration with third parties are creating new opportunities within the IT security team. Cyber security will need to be the cornerstone of our IT strategy as we move towards our future objectives.We’re looking for IT security professionals that can help us on the journey through this challenging and ever-changing technology landscape. Individuals who:- Understand that security is a journey and not a destination. Cyber security is not something that can be “fixed”, and we instead need to focus on innovation to maintain sustainable risk position against the evolving threat landscape.- Understand that we can’t just buy our way out of a cyber security problem. Technology may win the battle, but it won’t win the war.- Understand that cyber security is not just dealing with over-enthusiastic teenagers. We are potentially working against state-sponsored attacks and multi-billion dollar organized crime syndicates.- Understand attackers, their motivations and their ways of working to be able to get ahead and keep ahead of them.**Typical Accountabilities**:The core accountabilities for the role include:- Architect cyber security solutions for the organisation spanning Cloud, Hybrid and on-premise as well as third-party collaboration environments.- Help define the future state of cyber security within the organisation, conduct review and gap analysis between current state and future state including existing measures and controls, and then work to uplift to align to the future state vision.- Define security strategies, self-service standards and ways of working for users working across the cloud- Work with existing security teams to implement and enforce strategies and policies across the enterprise- Define and create a portfolio of secure design principles to support bespoke architectures that doesn’t fit existing patterns.- Collaborate with other architecture functions resulting in effective security. Supporting other functions towards a shared goal of delivering secure cloud solutions.- Ensure lastest trends and technology are considered as part of solutioning. For example, consider the security implications of IoT being integrated into our existing landscape.- Define Cloud Security Architecture patterns and design principles- Work with Solution Architects, Solution Engineering and Support functions to ensure that cloud solutions are secure and align with AZ Security policies and guidelines.- You will also perform security reviews of cloud solutions, looking at compliance, but also how solutions can be improved for security in the way they are designed, used, built and maintained.- Advise technical leaders on cloud security when making strategic decisions- Designing or reviewing whether security controls for a computer system are suitable; this is based on an understanding of both use and context, and how the system will likely be attacked- Provide technical support and expertise to cloud users, and conduct architectural reviews throughout project and solutions design lifecycle**Education, Qualifications, and Experience****Essential**- Must have an understanding of the OWASP methodology, process and artefacts- Must have been a