> Markdown version of [/jobs/ext/3862911-security-architecture-lead](https://www.wearedevelopers.com/jobs/ext/3862911-security-architecture-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Architecture Lead

- **Company:** The Openwork Partnership
- **Location:** UK
- **Experience:** Expert
- **Salary:** £90,000.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Application Firewall, User Authentication, Cyber Security, Data Security, Identity and Access Management, Microsoft Software, Fortify (Software), Software Engineering, Software Security, Veracode, Api Gateway
- **Published:** October 22, 2026
- **Apply:** https://apply.theopenworkpartnership.com/vacancies/22725/security-architecture-lead.html

## About the Role

* Strong cyber security and solution architecture expertise, covering risk management, enterprise change, cloud and third-party services, with the judgement to assess and address complex or novel risks associated with AI and emerging technologies.
 * Strong knowledge of identity and access security, including authentication and authorisation protocols, Identity and Access Management (IAM), Privileged Access Management (PAM), API gateways and API security.
 * Strong working knowledge of application security, including secure application design, threat modelling methodologies such as STRIDE, Web Application Firewalls (WAF), and security testing tools including Veracode and Fortify.
 * Strong understanding of secure software development practices, including the Microsoft Software Development Lifecycle and the integration of security controls throughout the development lifecycle.
 * Strong knowledge of infrastructure and network security, with the ability to assess architectures, identify security risks and recommend proportionate controls.
 * Strong understanding of data security, including the principles and controls required to appropriately protect sensitive and business-critical information.
 * Excellent influencing and stakeholder management skills, with the ability to constructively challenge, persuade and build credibility across a complex organisation.
 * Strong business partnering capability, with experience working as a trusted adviser to internal and external stakeholders and translating technical cyber security risks into clear business implications.

## Description

As the Security Architecture Lead, you will provide strategic security architecture leadership and oversight for significant technology and business initiatives, including cloud services, payments, third-party solutions, APIs, data protection and the adoption of emerging technologies, ensuring that cyber security risks and architectural requirements are identified, assessed and appropriately addressed throughout the design and implementation lifecycle., * Lead security solution architecture for Openwork projects, including cyber security risk assessments, the identification and implementation of controls, review of supplier-proposed solutions and engagement with RFI and RFP exercises.

 * Collaborate with other cyber security functions involved with change management, specifically Assurance & Compliance, Security Engineering, and the Security Operations Centre
 * Review queries and escalations regarding security policies, compliance, and risks and validate changes to cyber security policies and standards from a technical perspective.
 * Own and direct the development of Openwork's Enterprise Security Architecture, defining the target direction and ensuring its application across technology and change portfolios.
 * Determine and influence technology and solution lifecycle decisions from strategy and design through implementation, operation, renewal and retirement, ensuring cyber security risks, controls and architectural implications are addressed at the appropriate stage.
 * Assess and determine the enterprise-wide implications of architecture decisions affecting all users, major services, cyber risk exposure and significant third-party, cloud and cyber security solutions, ensuring outcomes are secure, usable, proportionate and consistently applied across Openwork.
 * Define, mandate, maintain and uphold security architecture principles, standards and patterns with enterprise-wide impact; approve, reject, conditionally approve or escalate material architecture decisions and exceptions; and drive consistent adoption across technology teams, change initiatives and third-party solutions.