Information Security Architect

Information Security Architect (Cloud & Enterprise Security)

2-3 DAYS PER WEEK IN A LONDON OFFICE

About the Role

We’re looking for an experienced and forward-thinking Information Security Architect to join our growing security function.

This role sits at the heart of our technology transformation, shaping secure, scalable solutions across cloud, data platforms, and emerging technologies. You’ll work closely with architecture, engineering, and business teams to ensure security is embedded by design from early concept through to delivery.

This is a high-impact role where you’ll influence strategy, guide complex programmes, and help evolve our security architecture in line with modern engineering practices, including cloud-native development, DevSecOps, and AI-driven solutions.

What You’ll Be Doing

• Designing and reviewing secure, scalable architectures across cloud and enterprise platforms
• Leading technical risk assessments across projects and strategic initiatives
• Embedding security by design into Agile and DevOps delivery models
• Conducting threat modelling (e.g. STRIDE) and security architecture reviews
• Developing and maintaining security standards, patterns, and reference architectures
• Partnering with engineering, architecture, and business teams to align security with innovation
• Supporting design authority and governance forums, reviewing and approving technical designs
• Evaluating new technologies, vendors, and solutions to improve security capability and efficiency
• Driving automation and security integration within CI/CD pipelines and infrastructure-as-code environments
• Contributing to risk remediation strategies, balancing business needs with regulatory and security requirements

What We’re Looking For

We’re particularly interested in candidates who combine strong architectural thinking with hands-on technical depth and a modern approach to security.

Core Experience

• Proven experience in security architecture within large or complex environments
• Strong background in cloud security (AWS, Azure, or GCP)
• Experience with threat modelling, risk assessment, and security assurance frameworks (e.g. NIST, ISO, GDPR, PCI-DSS)
• Ability to design and implement security standards, controls, and architecture patterns
• Experience working within Agile / DevOps environments

Technical Expertise

• Cloud-native security (IAM, network security, data protection, workload security)
• DevSecOps and CI/CD security, including automated testing and policy enforcement
• Infrastructure-as-Code (e.g. Terraform) and security automation
• Application and platform security, including APIs and microservices
• Strong understanding of networking (TCP/IP, firewalls, OSI model)
• Experience with scripting or automation (e.g. Python, PowerShell, Bash)

Highly Desirable (What Sets You Apart)

We’re especially keen to hear from candidates with experience in:

• Cloud data platforms and data security architectures
• AI / ML security or emerging technology risk
• Embedding security into engineering workflows at scale
• Designing security for high-volume, distributed or regulated systems
• Building security-as-code frameworks and automated controls
• Working across multiple cloud providers (AWS, Azure, GCP)

Skills & Behaviours

• Strong technical leadership and architectural decision-making
• Ability to translate complex security concepts into clear business language
• Excellent stakeholder engagement and influencing skills
• Collaborative mindset with a focus on enabling, not blocking, delivery
• Comfortable operating in fast-paced, evolving environments
• Highly organised with the ability to manage competing priorities

Qualifications & Certifications

• Degree in Computer Science, Information Security, or equivalent experience
• Industry certifications such as CISSP, CCSP, CISM, CRISC, AWS, or Azure are highly desirable

Why Join Us?

• Work on cutting-edge cloud and data platforms, including emerging technologies
• Be part of a team driving modern security practices and innovation
• Influence enterprise-wide architecture and strategic initiatives
• Collaborate with high-performing engineering and architecture teams
• Opportunity to shape and evolve a forward-looking security function

Ready to Apply?

If you’re passionate about building secure, scalable systems and want to play a key role in shaping the future of security architecture, we’d love to hear from you.

We’re particularly interested in candidates who combine strong architectural thinking with hands-on technical depth and a modern approach to security., * Proven experience in security architecture within large or complex environments

• Strong background in cloud security (AWS, Azure, or GCP)
• Experience with threat modelling, risk assessment, and security assurance frameworks (e.g. NIST, ISO, GDPR, PCI-DSS)
• Ability to design and implement security standards, controls, and architecture patterns
• Experience working within Agile / DevOps environments

Technical Expertise

• Cloud-native security (IAM, network security, data protection, workload security)
• DevSecOps and CI/CD security, including automated testing and policy enforcement
• Infrastructure-as-Code (e.g. Terraform) and security automation
• Application and platform security, including APIs and microservices
• Strong understanding of networking (TCP/IP, firewalls, OSI model)
• Experience with scripting or automation (e.g. Python, PowerShell, Bash), We’re especially keen to hear from candidates with experience in:
• Cloud data platforms and data security architectures
• AI / ML security or emerging technology risk
• Embedding security into engineering workflows at scale
• Designing security for high-volume, distributed or regulated systems
• Building security-as-code frameworks and automated controls
• Working across multiple cloud providers (AWS, Azure, GCP), * Strong technical leadership and architectural decision-making
• Ability to translate complex security concepts into clear business language
• Excellent stakeholder engagement and influencing skills
• Collaborative mindset with a focus on enabling, not blocking, delivery
• Comfortable operating in fast-paced, evolving environments
• Highly organised with the ability to manage competing priorities, * Degree in Computer Science, Information Security, or equivalent experience
• Industry certifications such as CISSP, CCSP, CISM, CRISC, AWS, or Azure are highly desirable