Managing Security Architect

Shape the future of cyber security. Protect what matters most.

This is more than an architecture role. It’s an opportunity to shape security strategy for major organisations, influence critical business decisions, and work at the forefront of cyber security innovation. If you’re passionate about reducing risk, improving resilience, and delivering secure digital transformation at scale, we’d love to hear from you.

Are you a seasoned Security Architect ready to influence enterprise-scale transformation? This is your chance to lead from the front, helping clients tackle complex cyber challenges while embedding security into the heart of business-critical solutions.

As a Managing Security Architect, you’ll champion secure-by-design principles, working with senior stakeholders, architects, and delivery teams to ensure security is built in from day one, not bolted on later. You’ll combine strategic thinking with hands-on leadership, designing security architectures that protect against evolving threats while enabling innovation and growth.

Hybrid: 2 days in Stratford, East London. 3 days home based.

You do need to hold, or be eligible for, SC Clearance.

What You’ll Be Doing:

• Leading security architecture engagements across large and complex programmes.
• Driving threat modelling, secure design, and cyber resilience throughout the delivery lifecycle.
• Defining and assuring security controls that meet regulatory and business requirements.
• Identifying and mitigating cyber risks.
• Enabling secure cloud adoption and ensuring robust platform and integration security.
• Supporting governance, audits, incident response, resilience planning, and security assurance.
• Influencing senior stakeholders and helping organisations make informed security decisions.

• Proven experience leading large-scale Security Architecture initiatives.
• Strong knowledge of frameworks such as TOGAF, SABSA, NCSC Cloud Security and related industry standards.
• Experience working within regulated environments and frameworks such as GDPR and DORA.
• The ability to translate complex technical concepts into clear business outcomes.
• Exceptional stakeholder management, communication, and leadership skills.
• Industry certifications such as CISSP, CCSP/CCSK, TOGAF or SABSA.

Desirable Experience:

• Cloud Security Reference Architectures and SaaS security models.
• NIST CSF and NIST 800-53 controls.
• Ethical hacking or offensive security qualifications.
• Expertise in domains such as IAM, Infrastructure Security, Data Security, or Cloud Security.
• Financial Services sector experience., * SaaS
• SABSA
• GDPR
• NCSC
• DORA
• CISSP & Related Security Certifications
• Cloud Security
• Security Architecture
• Stakeholder & Contractor Management
• TOGAF Architecture Framework

Sopra Steria’s Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client’s goal of National Security, and we operate in a unique and privileged environment.

We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK’s most complex safety- and security-critical markets.