Security Architect

We’re seeking an experienced Security Architect to join its growing Consulting Practice. This is an exciting opportunity to work with high-profile clients across a range of sectors, helping them design, implement and improve secure technology solutions in increasingly complex environments.

As a Security Architect, you will provide expert guidance throughout the entire solution life cycle, ensuring security is Embedded from concept through to deployment and retirement. Working closely with technical and business stakeholders, you will help organisations make informed, risk-based decisions while strengthening their overall security posture.

This role offers the chance to work across diverse technology landscapes, including cloud-native environments, digital transformation programmes, and enterprise security initiatives., * Provide security architecture and secure design guidance throughout project life cycles.

• Ensure solutions align with recognised security standards, architectural principles and organisational policies.
• Promote and embed Secure by Design principles.
• Assess, validate and assure security controls and their effectiveness.
• Design security architectures for public and private cloud environments.
• Support the planning and scoping of IT Health Checks (ITHCs) and interpret assessment outcomes.
• Identify, assess and manage security risks within solution architectures.
• Conduct threat modelling, risk assessments and security impact analyses.
• Design proportionate security controls using cloud-native technologies and services.
• Produce architecture artefacts including security patterns, standards, blueprints and roadmaps.
• Collaborate with internal teams and client stakeholders to deliver pragmatic, business-focused security solutions.

You will be an experienced Security Architect with a strong consultancy mindset and the ability to communicate effectively with both technical and non-technical audiences. Essential Experience

• Proven experience working as a Security Architect or in a similar security leadership role.
• Strong background in cybersecurity, enterprise security architecture, risk management or information security.
• Experience delivering security architecture within complex technology environments.
• Ability to balance security requirements with business objectives and operational needs.

Technical Knowledge

Strong understanding of:

• Security legislation and regulatory requirements, including GDPR, PCI DSS and related compliance frameworks.
• Security frameworks and standards including ISO 27001, NIST Cyber Security Framework and CIS Controls v8.
• UK Government and NCSC security policies, guidance and best practices.
• Cloud security architecture, particularly AWS services such as IAM, KMS and ECS.
• Event-driven and microservices-based architectures.
• Cloud Security Posture Management (CSPM) and cloud-native security tooling for AWS and Azure.
• Endpoint security technologies.
• Public Key Infrastructure (PKI), cryptography, privileged access management and role-based access control (RBAC).

Qualifications & Certifications

One or more of the following certifications would be highly desirable:

• CISSP
• CISM
• SABSA
• TOGAF
• AWS Certified Solutions Architect
• Microsoft Azure Solutions Architect Expert

Additionally, candidates should have achieved, or be actively working towards:

• Full Membership of CIISEC
• UK Cyber Security Council Professional Registration at Principal or Chartered level within Secure Systems Architecture

• Opportunity to work on impactful, large-scale security programmes.
• Exposure to a broad range of clients, technologies and industries.
• Ongoing professional development and support for certifications.
• Flexible and remote-first working arrangements.
• Competitive salary and comprehensive benefits package.
• Collaborative and inclusive culture with opportunities for career progression.