Cyber Security Architect - OutsideIR35

We are seeking an experienced Security Architect Consultant to provide advisory support across a complex digital estate, reviewing security architectures, assessing risks, and supporting the delivery of security improvements across critical technology platforms.

This role will involve working with technical teams, architects, and senior stakeholders to review existing security controls, improve security design practices, and support the implementation of secure technology solutions across a highly regulated environment., * Review and refresh existing Cyber Security Impact Assessments (CSIAs) across a portfolio of live digital products and services.

• Assess existing threat models and security architectures to ensure they reflect current risks and technology changes.
• Provide security architecture guidance across projects from initial design through to delivery.
• Conduct security risk assessments and provide recommendations for security improvements.
• Support technical teams with secure design reviews and architectural assurance.
• Review and advise on security improvements across areas including:
• Network security
• Firewall technologies
• Secure remote access / VPN solutions
• Virtualisation environments
• Security monitoring and endpoint protection tooling
• Identity and access controls
• Infrastructure security
• Work with engineering and DevOps teams to ensure security is embedded throughout the delivery lifecycle.
• Produce clear security documentation, architectural recommendations, and risk treatment plans.
• Support governance activities and security assurance processes.

• Proven experience working as a Security Architect / Cyber Security Consultant within complex enterprise environments.
• Strong background in security architecture, risk assessments and technical security reviews.
• Experience reviewing and producing security impact assessments or similar security assurance documentation.
• Ability to assess technical solutions and provide practical security recommendations.
• Strong understanding of:
• Network security architecture
• Firewalls and secure connectivity
• VPN technologies
• Security monitoring solutions
• Endpoint security controls
• Cloud and infrastructure security
• Experience working across large-scale transformation or improvement programmes.
• Excellent stakeholder management and communication skills.

Desirable Experience

• Experience within aviation, transport, critical national infrastructure (CNI), or other highly regulated sectors.
• Previous experience supporting environments with operational technology (OT) considerations.
• Familiarity with safety-critical systems and complex infrastructure environments.
• Experience working with DevOps / continuous improvement teams.
• Existing SC Clearance or ability to obtain SC Clearance.