> Markdown version of [/jobs/ext/4597356-security-architect](https://www.wearedevelopers.com/jobs/ext/4597356-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Architect

- **Company:** Atos SE
- **Location:** UK (Remote available)
- **Contract:** Permanent contract
- **Skills:** Software as a Service, Cloud Computing, Cyber Security, DevOps, Cloud Services, Sherwood Applied Business Security Architecture, Enterprise Software Applications, Togaf, National Institute of Standards and Technology Cybersecurity Framework, SC Clearance, CIS Benchmarks
- **Published:** November 6, 2026
- **Apply:** https://jobs.atos.net/talentcommunity/apply/1455178033/?locale=en_US

## About the Role

* Significant experience within information security, cyber security, information security architecture, or DevOps.
 * Experience providing security assurance, architecture reviews, or governance oversight.
 * Strong understanding of security risk management and security control frameworks.
 * Experience reviewing cloud, SaaS and enterprise technology architectures.
 * Excellent stakeholder management, communication, and influencing skills.

Desirable Certifications/ Qualifications

 * CCSP.
 * CISSP.
 * CISM.
 * Architecture Methodology e.g. Unified Engineering Methodology (UEM), TOGAF Foundation, SABSA.
 * ISO 27001.
 * Professional awarded qualifications.

Note: This role is UK-based and offers a remote working opportunity, with occasional UK domestic travel as required.

Essential Criteria - SC Eligibility

To be eligible for SC clearance, you must have lived and worked in the UK continuously for the past 5 years.

## Description

We are seeking a Security Architect to join the BPS Security Architecture & Assurance (Security Governance) capability within highly regulated UK Government and financial services environments. Working across complex, business-critical platforms and alongside other Security Architects and Assurance Managers, you will ensure security is embedded by design and evidenced throughout delivery.

This role is focused on judgement, influence and risk-based decision-making, balancing security, business and operational priorities to deliver defensible architecture, assurance outcomes and risk assessments that will withstand client and audit scrutiny.

The successful candidate will provide security architecture oversight and assurance across client programmes, projects, services and third-party suppliers within complex enterprise and regulated environments.

 * The role is responsible for determining whether proposed solutions, designs and services meet organisational security requirements, regulatory obligations and good industry practice.
 * The role does not design or implement technical solutions. Instead, it provides independent review, governance, risk assessment, and security approval activities throughout the solution lifecycle.

Where purpose meets career:

 * Work & Team Culture - Collaborative, inclusive, and supportive environment that encourages teamwork, flexibility, and continuous learning.
 * Contribution & Impact - Opportunity to take ownership, contribute meaningful ideas, and make a visible impact on business and customer outcomes.
 * Better Technology - Work with modern, innovative technologies that enhance skills, improve efficiency, and support continuous digital transformation.

Core Responsibilities

 * Security Governance: Participate in Architecture Review Boards and provide review/security sign-off in line with governance requirements.
 * Security Governance: Define and enforce secure architecture standards, reference patterns, and mandatory security controls.
 * Security Architecture Assurance: Review/approve security-relevant designs and major technical changes.
 * Security Architecture Assurance: Act as a security design authority across infrastructure, platforms, and applications.
 * Security Architecture Assurance: Conduct independent security architecture reviews and assess designs against security standards, policies and control frameworks.
 * Security Risk Management: Perform security risk assessments (to identify vulnerabilities), threat assessments, and support risk treatment decisions.
 * Supplier and Cloud Assurance: Assess third-party suppliers, SaaS platforms and cloud services using assurance evidence and independent testing reports.
 * Compliance and Regulatory Assurance: Ensure alignment with NIST CSF, NCSC guidance, CIS Controls, ISO/IEC 27001, UK GDPR, UK Gov. Security Classifications.
 * Security Assurance: Coordinate and support IT Health Checks (ITHCs), ensure findings are reviewed, risk-assessed, and remediated through appropriate governance processes.
 * Security Advisory: Provide pragmatic security guidance and act as a trusted adviser to delivery and business stakeholders.