Lead Cyber Security Architect

Our Cyber Security Architecture Delivery Team defines security standards across the organisation, provides specialist guidance to delivery teams, and helps shape the selection and implementation of security technologies. Working across a diverse technology landscape, including AWS and Azure environments, the team ensures that security is embedded from the earliest stages of design through to delivery.

As a Lead Cyber Security Architect, you will provide leadership and assurance across a portfolio of projects and data platforms, ensuring solutions are secure, resilient and aligned with organisational standards. You will oversee architectural design reviews, threat modelling activities and risk assessments, while influencing strategic decisions that enhance both security capability and organisational culture.

This is a high-profile opportunity to lead security architecture within a complex and evolving environment where your expertise will directly contribute to safeguarding critical national infrastructure and public services.

About the Team

The Cyber Security Architecture Delivery Team consists of a blend of permanent civil servants and specialist contractors, including three Lead Security Architects, a Head of Department, and a team of Security Architects.

The team works collaboratively across UKHSA, partnering with project teams, technology specialists and senior stakeholders to ensure security is integrated into every aspect of service design and delivery., As Lead Cyber Security Architect, you will:

• Lead and support Security Architects, providing oversight and assurance that architecture reviews and threat modelling activities are delivered consistently and to a high standard.
• Ensure the team has access to the blueprints, standards, policies and guidance needed to effectively deliver secure architecture outcomes.
• Champion a risk-based, pragmatic and outcome-focused approach to cyber security architecture.
• Develop, maintain and communicate effective security policies and standards.
• Promote security best practice across multidisciplinary teams to enable the delivery of secure, scalable and resilient services.
• Identify, manage and respond to security risks and issues, providing clear recommendations and guidance.
• Build and maintain strong relationships with security stakeholders across UKHSA, the Cabinet Office, the National Cyber Security Centre (NCSC) and wider government.
• Ensure alignment with DSPT-CAF requirements and maintain the security architecture framework, including standards, patterns and blueprints., You will work closely with a broad range of stakeholders, including business leaders, project managers, delivery partners and multidisciplinary technology teams responsible for building and operating critical services.

This role offers the opportunity to influence security strategy at scale, shape future technology decisions, and contribute to the delivery of secure digital services that support the health and wellbeing of millions of people.

Security Clearance Requirements

This role requires National Security Vetting at Security Check (SC) level. Clearance must be successfully obtained before the successful candidate can commence employment.

To enable meaningful national security vetting checks, candidates should normally have been a resident in the United Kingdom for the last five years.

Please review the eligibility requirements carefully. If you have any questions regarding security clearance, please contact the Recruitment Manager or Vacancy Holder for further information.

Why Join Us?

• Lead security architecture across nationally significant programmes.
• Influence strategic technology and security decisions.
• Work with modern cloud technologies, including AWS and Azure.
• Collaborate with experts across government and the cyber security community.
• Enjoy the flexibility of a remote-based role while delivering meaningful public impact.
• A generous Civil Service pension, with employer contributions averaging 28.97%.

Can demonstrate cyber security knowledge in a previous practical role, especially working within big programmes, and have experience of security management and information assurance practices

• Understands security end-to-end, from security considerations in the design of services, through to architecture reviews, threat modelling, controls and remediation against existing live services
• Builds strong relationships and communicates effectively with senior stakeholders and colleagues, ensuring that security considerations are well accounted for and built into ways of working

Desirable criteria

• Has experience with modern software engineering practices and cloud infrastructure, including building, managing and deploying modern web services
• Leading a team of technical specialists