Solution Architect

A leading organisation delivering large-scale digital transformation and secure technology initiatives is seeking an experienced Security Architect to support the design, assurance, and governance of secure digital services. This role offers the opportunity to work across complex technology programmes, ensuring security considerations are Embedded throughout the solution lifecycle., As a Security Architect, you will provide security architecture expertise across a range of technology initiatives, helping teams deliver secure, scalable, and compliant solutions. You will work closely with technical teams, delivery leads, business stakeholders, and risk owners to identify security risks, advise on appropriate controls, and ensure security requirements are incorporated into solution designs.You will play a key role in translating complex security concepts into practical recommendations for both technical and non-technical audiences while helping stakeholders make informed risk-based decisions., Security Architecture & Design

• Design and review secure technical solutions across cloud, application, infrastructure, and integration domains.
• Ensure security controls are incorporated throughout the design and delivery lifecycle.
• Apply security architecture principles to complex business challenges while balancing technical, regulatory, operational, and organisational requirements.
• Ensure alignment with enterprise architecture standards and business objectives.
• Provide appropriate levels of security assurance and design rigour.

Risk Assessment & Management

• Identify, assess, and communicate security risks associated with proposed solutions.
• Collaborate with risk owners to provide guidance, recommendations, and constructive challenge.
• Assess risk impact and determine whether risks sit within organisational tolerance levels.
• Support risk acceptance processes and recommend mitigating controls.
• Contribute to governance activities, design reviews, and security assessments.

Stakeholder Engagement

• Build strong relationships with technical and non-technical stakeholders.
• Communicate security risks, threats, and mitigation strategies clearly and effectively.
• Manage stakeholder expectations throughout design and assurance activities.
• Facilitate workshops and discussions to drive consensus on security decisions and risk treatment approaches.
• Respond positively and effectively to challenge.

Security Advisory & Governance

• Provide expert security advice throughout the delivery lifecycle.
• Review designs and architectures to ensure compliance with security standards and best practice.
• Support security assurance activities and technical design authority reviews.
• Ensure security considerations are Embedded within Agile and traditional delivery environments.

• Proven experience as a Security Architect within large-scale enterprise or public sector environments.
• Strong understanding of cyber security principles, security architecture frameworks, and risk management methodologies.
• Experience conducting security architecture reviews and providing design assurance.
• Ability to assess technical solutions and identify security risks across multiple technology domains.
• Excellent stakeholder management and communication skills.
• Ability to communicate complex technical security concepts to both technical and non-technical audiences.
• Experience working with risk owners and senior stakeholders to manage security and business risk.
• Strong influencing and decision-making skills, with the ability to provide constructive challenge.
• Experience working within Agile and multidisciplinary delivery environments.

Desirable skills and experience

• Experience within healthcare, NHS, or other highly regulated environments.
• Knowledge of cloud security architecture and hybrid environments.
• Familiarity with ISO 27001, NIST, CIS Controls, Government Security Principles, and similar frameworks.
• Experience supporting digital transformation and cloud migration programmes.
• Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, or equivalent.