Senior Security Architect
Role details
Job location
Tech stack
Job description
Cyber security is one of the defining challenges facing organisations today and remains a top strategic risk for PwC's clients, with UK CEOs consistently identifying it as a major concern amid rapid digital transformation and operational change., The Senior Security Architect leads the design of secure information security architectures and ensures technology initiatives are delivered within a robust security framework. The role is highly client-facing, focusing on understanding client challenges, advising on best practice, and guiding the planning, implementation, and testing of security controls. Strong stakeholder engagement and strategic security guidance are core to the role.
- Partner with enterprise and cloud architects to design and deliver secure architectures and guardrails
- Define and execute strategic and operational security objectives for clients
- Advise on securing cloud and SaaS platforms (e.g. Workday, SAP, Salesforce, Oracle)
- Assess threats, vulnerabilities, and security controls to identify risk and gaps
- Develop risk metrics and insights to inform decision-making
- Lead client meetings and workshops, communicating threat and remediation options
- Collaborate with alliance partners including Microsoft, Google, and AWS
Requirements
The ideal candidate can clearly communicate security and risk concepts to senior stakeholders and brings experience in:
- Security architecture and best practices, across networks and enterprise cloud
- Cloud well-architected frameworks and major CSPs (Azure, AWS, GCP)
- Security frameworks such as ISO/IEC 27001, NIST 800-53, and OWASP
- Cloud security implementation, particularly identity, network, and encryption
- Knowledge of logging, monitoring, SIEM, threat detection, and PKI
- Understanding of cyber risk, threat intelligence, and governance trends
- Experience supporting security transformation programmes and business cases
Possession of Relevant certifications may include: SABSA, TOGAF, CISSP, CISM, Azure / AWS / GCP security or architecture certifications, or you will have equivalent work experience. This includes international candidates who qualify through experience in their home country.
You will come from a consulting background, with strong client-facing skills, the ability to gather requirements, and produce high-quality written deliverables. Willingness to travel to client sites is required.
A degree in a relevant technical discipline (or equivalent experience) is preferred but not essential
About the company
PwC provides services to 420 out of 500 Fortune 500 companies. The firm was formed in 1998 by a merger between Coopers & Lybrand and Price Waterhouse.