Cyber Security Architect & Engineering Lead

• Define and maintain enterprise security architecture across identity, endpoints, networks, cloud, SaaS, data, applications, APIs, integration platforms and development environments.
• Act as the technical lead for AI security, working alongside business, legal, data protection, risk and responsible AI stakeholders.
• Design secure architectures for Microsoft 365 Copilot, Copilot Studio, AI agents, custom AI applications, retrieval-augmented generation, Azure AI services, third-party models and Model Context Protocol integrations.
• Own the technical security control catalogue and map control objectives to architecture patterns, technology configurations, owners, evidence and testing methods.
• Act as the senior technical escalation point for complex or high-severity incidents and participate in the major incident on-call arrangements.
• Design and strengthen identity security using Microsoft Entra ID, Conditional Access, Privileged Identity Management, identity governance, workload identities, access reviews and phishing-resistant authentication.
• Support cyber security due diligence for acquisitions and provide clear assessments of material risks, remediation costs, integration priorities and required investment.

• Relevant experience in cyber security, including substantial hands-on experience in security architecture or security engineering roles.
• Demonstrable experience designing and implementing security controls in a complex Microsoft-centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure and Microsoft Purview.
• Practical experience securing generative AI, AI agents, data-driven applications or comparable emerging technologies, with a strong understanding of AI-specific attack techniques and mitigations.
• Strong knowledge of identity security, Zero Trust, cloud security, data security, endpoint security, network security, application and API security, secure software development and DevSecOps.
• Strong experience in incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation.
• Ability to automate security and assurance processes using technologies such as Python, PowerShell, Logic Apps, Azure Functions, APIs, infrastructure as code or equivalent platforms.
• Working knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and recognised AI security and governance frameworks.

DGH Recruitment are currently recruiting on behalf of a leading client in the Accountancy industry who require a Cyber Security Architect & Engineering Lead to join the firm in London.

You will be responsible for translating security strategy and business requirements into secure designs, practical controls, technical standards and measurable outcomes., In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon DGH Recruitment Limited having first sought approval of its client to find candidates for this position.

DGH Recruitment Limited acts as both an Employment Agency and Employment Business