Security Architect

We’re partnering with a high-profile, regulated consumer organisation to appoint an experienced Security Architect on a 12-month fixed-term contract.

This is an excellent opportunity for a security professional with strong enterprise architecture experience to support a large-scale transformation programme involving multiple high-security-impact workstreams.

Working within the Enterprise Security team, you’ll produce high-level and low-level security designs, conduct risk assessments and ensure solutions comply with relevant security policies, standards and architectural patterns.

The Opportunity

As Security Architect, you’ll help ensure security is embedded into technology solutions from the earliest stages of the project lifecycle.

You’ll work closely with Technology Solution Architects, Project Managers, Business Analysts and other key stakeholders, supporting projects from the production of technical design documentation through to the secure delivery of solutions into production.

This is a highly collaborative role requiring strong technical knowledge, structured security-design experience and the ability to communicate complex risks clearly to both technical and non-technical stakeholders.

Key Responsibilities

You’ll support the design and delivery of secure enterprise technology solutions by:

• Providing specialist security support as part of multidisciplinary project teams.

• Working with Technology Solution Architects to embed security into solutions early in the project lifecycle.

• Balancing security requirements with wider project considerations, including cost, pace and quality.

• Defining security requirements based on risk assessments, security standards and established architectural patterns.

• Assessing and communicating security risks and areas of non-compliance to programme stakeholders and service owners.

• Supporting stakeholders in reaching appropriate and agreed risk positions.

• Undertaking security-design governance activities and updating design artefacts in response to feedback.

• Producing test plans and scopes for functional security testing and penetration testing.

• Supporting internal and external security-testing resources throughout the testing process.

• Providing security input from initial technical design through to the successful delivery of solutions into production.

You’ll be an experienced Security Architect with a strong background supporting enterprise-level projects and designing secure solutions across complex technology environments.

You will also have:

• Proven experience providing security architecture support to enterprise-level projects and programmes.

• Strong knowledge of threat-modelling techniques such as STRIDE, DREAD and MITRE ATT&CK.

• Experience producing structured, high-quality security requirements and designs that comply with relevant standards.

• Broad technical knowledge across infrastructure, networks, systems, databases and applications.

• A strong understanding of identity and access management, cryptography, endpoint security, network security and application security.

• Knowledge of security logging and monitoring, vulnerability management and wider security operations.

• Experience working with external parties to produce security test plans and support activities such as penetration testing.

• A strong understanding of cloud security architecture and principles across IaaS, PaaS and SaaS environments.

• Knowledge of industry standards and frameworks, including CIS, ISO 27000, PCI DSS and NIST.

• Experience identifying security-control gaps and communicating associated risks accurately to stakeholders.

• The ability to influence secure design decisions while considering commercial and delivery requirements.

• Excellent written, presentation and verbal communication skills.

It would also be advantageous to have:

• Experience working within a complex release-management model or technical delivery environment.

• Experience using Agile tools such as Jira and Confluence.

• Previous experience within gaming, gambling, online casino, sports betting or iGaming environments.

• Experience working within another highly regulated sector, such as financial services or healthcare.

• Knowledge of Agile, Scrum, Lean and Waterfall delivery methodologies.

• CISSP certification or another relevant security qualification.

This is a fantastic opportunity to influence the security of strategically important technology solutions within a complex and highly regulated organisation.

In return, you’ll benefit from:

• A salary of up to £90,000.

• A 12-month fixed-term contract supporting a major transformation programme.

• The opportunity to work across multiple high-security-impact workstreams.

• Significant exposure to enterprise security architecture, cloud technology and complex solution design.

• Close collaboration with architecture, project delivery, business analysis and security-testing teams.

• The opportunity to influence security decisions from initial design through to production.

• A company bonus scheme.

• Matched pension contributions of up to 8.5%.

• 26 days of annual leave, additional wellbeing days and bank holidays.

• Private medical cover and income protection.

• Enhanced family-leave policies.

• A £500 wellness allowance.

• Access to flexible benefits, financial support services and an Employee Assistance Programme.

• Volunteering days and matched funding opportunities.