GCP DevSecOps Cyber Security Architecture

The Supplier shall provide dedicated Cyber Security Architecture services for the following strategic platforms:

• Enterprise Data Warehouse (EDW) Our core data platform in JLR accountable for warehousing and analytic workloads
• APEX Software Engineering Platform – Our enterprise software engineering platform running ~142 applications
• The scope includes the Provision of a named or dedicated Cyber Security Architect responsible for:
• Cloud security architecture, design reviews, and assurance.
• Secure-by-design, cloud security, and platform security guidance.
• DevSecOps advisory and security controls implementation support.
• Risk assessment, exception management, and remediation planning. To be tied into the central cloud and JLR risk process
• Security governance and compliance support.
• Stakeholder, product, and engineering team engagement.

The architect shall act as a trusted advisor and embedded member of both programme groups.