Cyber Security Consultant : Career Path to Architect

I’m working with a leading UK consultancy that’s growing its Security Architecture capability, supporting major programmes across government, defence, critical infrastructure and other regulated environments. You don’t need Security Architect as a job title. I’m interested in people from Security Engineering, Cyber Security Consulting, Cloud Security, Information Security or Security Assurance who understand how secure systems are designed and want to step further into architecture.

You’ll work directly with clients, helping them understand risk, define requirements and design secure solutions. That means strong communication is essential, both with engineers and with senior stakeholders who don’t have a security background.

The work includes:

• Security architecture and secure-by-design
• Threat modelling and risk assessment
• Reviewing solution and infrastructure designs
• Defining security requirements and controls
• Cloud, network and identity security
• Running client workshops and presenting recommendations

Experience with NIST, SABSA, TOGAF, ISO 27001, NCSC guidance, Zero Trust, IAM/PAM or cloud security is useful, but nobody is expected to tick every box. Certifications like CISSP, CISM, CCSP, SABSA or TOGAF help, though practical experience and client skills matter just as much.

It’s a consulting role but frequent travel isn’t expected, with only occasional client site visits depending on the assignment.

Candidates must hold or be eligible for SC clearance, which means:

• Resident in the UK for the last 5 years
• No more than 29 consecutive days outside the UK in that period
• No more than 6 months outside the UK in any calendar year

Existing SC is useful but not essential if you meet the eligibility criteria.

• CYBER SECURITY
• THREAT MODELLING
• SECURE BY DESIGN