> Markdown version of [/jobs/ext/326243-it-risk-advisor-operations-design](https://www.wearedevelopers.com/jobs/ext/326243-it-risk-advisor-operations-design). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Risk Advisor, Operations & Design

- **Company:** Thorpe Molloy McCulloch Recruitment
- **Location:** Aberdeen, UK
- **Contract:** Temporary contract
- **Skills:** Microsoft Azure, Cyber Security, Information Technology Operations, Information Technology, Hardware Infrastructure
- **Published:** June 2, 2026
- **Apply:** https://uk.indeed.com/viewjob?jk=8ad0ed65dcc15153

## About the Role

* Previous experience in a security architect or similar role
 * Knowledge of regulatory frameworks (e.g. NIS2, Cyber Resilience Act)
 * Industry certifications such as CISSP, GICSP, or equivalent
 * Degree in Computer Science, Information Security, or relevant discipline

## Description

Provide technical security architecture oversight across projects and BAU operations, ensuring secure-by-design principles are embedded across cloud and on-premises environments. Influence design, change, and governance decisions, reduce risk exposure, and support engineering teams with pragmatic, business-aligned security guidance without slowing delivery.

IT Risk Advisor specialising in secure-by-design architecture to provide technical security oversight across both project delivery and BAU operations. This role sits within technology governance, ensuring robust, proportionate security controls are embedded across evolving environments.

You will work closely with architects, engineers, and operational teams to influence design decisions, review risk, and ensure security is consistently integrated without impacting delivery pace.

Security Architecture Governance:

 * Define and maintain security architecture patterns, standards, and reference designs across cloud and on-premises environments
 * Establish secure configuration baselines and promote consistent adoption
 * Contribute to architecture governance forums (e.g. Architecture Review Board)
 * Review and assess high-risk design exceptions, ensuring risks are understood and managed
 * Drive adoption of secure-by-design principles across engineering teams

Project Security Advisory:

 * Provide hands-on security architecture guidance to delivery teams
 * Conduct threat-informed design reviews and support appropriate control selection
 * Apply secure patterns, reference architectures, and hardening standards
 * Enable early engagement to minimise downstream risk and rework

Operational Security Oversight (BAU):

 * Participate in Change Advisory Boards, providing security review and challenge
 * Review and approve high-risk firewall and configuration changes
 * Assess configurations across cloud (Azure) and on-premises infrastructure
 * Identify misconfigurations and exposure risks against defined baselines
 * Support prioritisation and remediation of high-risk and zero-day vulnerabilities
 * Provide pragmatic, operationally aligned security recommendations
 * Help reduce attack surface and improve resilience across IT operations


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [Azure-Well Architected Framework - designing mission critical workloads in practice](https://www.wearedevelopers.com/videos/1529-azure-well-architected-framework-designing-mission-critical-workloads-in-practice)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)