Information Security Architect

An exceptional opportunity for a senior Information Security Architect to shape the future of Cybersecurity in Bristol.

Cyber threats have grown sharper and faster than most organisations’ defences, and the gap between attacker capability and business preparedness keeps widening. This growing startup, built around cybersecurity products for mid-market and enterprise clients, is scaling its security architecture function to match demand. Bristol has become one of the UK’s genuine cybersecurity hubs, sitting close to GCHQ’s satellite operations and a dense cluster of defence and tech firms, and this business wants to be part of that story rather than watching from the sidelines. Flat structure, fast decisions, real equity. If you’ve been waiting for a role where your architectural decisions actually ship instead of sitting in a committee for six months, this is it.

Here’s what you’ll be doing:

Design and own the security architecture roadmap across cloud and on-prem infrastructure, balancing speed of delivery against risk

Lead threat modelling sessions for new products and features before they reach production

Work directly with engineering leads to embed security controls into CI/CD pipelines rather than bolting them on afterwards

Set standards for identity, access management and encryption across the estate, and hold the line when shortcuts get proposed

Assess third-party vendors and integrations for security posture before contracts get signed

Present risk findings and architectural trade-offs to non-technical stakeholders, including investors and clients

Proven track record designing security architecture at scale, ideally within a product-led or SaaS environment

Deep working knowledge of cloud security (AWS, Azure or GCP), zero trust models and secure network design

Familiarity with relevant frameworks such as ISO 27001, NIST or SOC 2, and the judgement to know when a framework is guidance rather than gospel

Comfort operating with ambiguity. Startups don’t hand you a finished playbook

Strong communication skills. You’ll need to explain complex risk to people who don’t live in this world every day

Relevant certifications (CISSP, CISM or similar) are useful but secondary to demonstrable judgement

£74,500 to £95,500, depending on experience

Equity or stock options, because you’re building something with a stake in it

Hybrid working from Bristol, with flexible hours built around output rather than hours logged

A genuine learning and development budget for certifications, conferences and courses

A flat structure where your ideas reach decision-makers directly, not through four layers of management

Why pursue a career in Cybersecurity?