Security Architect

Your tasks

Lead the development of security architecture practices across a complex organisation, working with technology, risk and business teams so that security requirements are built into projects and platforms.

• Provide architecture assurance for major business and technology change
• Promote secure-by-design principles across cloud, infrastructure, data, identity and operational environments

• Set and maintain security architecture principles, standards, patterns and reference designs
• Provide security architecture input to enterprise systems and transformation programmes
• Shape Identity and Access Management (IAM) design, including access governance and segregation of duties
• Assess cloud, infrastructure, network, data and integration designs for security risks
• Review third-party and delivery-partner proposals, recommending proportionate controls and mitigations
• Translate privacy, regulatory and compliance obligations into practical technical requirements
• Document architecture decisions, risk acceptances, exceptions and governance outcomes
• Support security design across operational technology, business integrations, acquisitions and emerging technologies

Requirements

• Experience developing and applying security architecture standards, principles and design patterns
• Strong understanding of IAM, access governance and segregation of duties
• Experience assessing or designing secure cloud, infrastructure, network, integration and data solutions
• Working knowledge of relevant security and privacy frameworks, such as UK GDPR, ISO 27001/27002, CIS Controls and Cyber Essentials
• Confidence providing technical assurance and constructively challenging third-party designs
• Strong communication and stakeholder-management skills across technical and non-technical teams
• CISSP or a comparable professional security qualification

Nice to Have

• Experience with SAP, ERP or other enterprise business platforms
• Involvement in complex technology change or transformation programmes
• Exposure to operational technology or industrial environments
• Awareness of AI security, risk and governance
• Additional qualifications such as SABSA, TOGAF, CCSP, CCSK, CISM or CRISC
• Familiarity with standards such as ISO 22301, ISO 42001, NIST CSF or IEC 62443