Security Architect

As Security Architect in AXA UK’s Infrastructure Architecture team, you will define and govern the organisation’s security architecture across on-premises, cloud, networks, and identity services. You’ll lead security design early in projects, embedding controls in platform design and operations. This role balances security, risk, regulatory requirements and business needs while guiding transformation through secure architectures. You’ll work closely with cross-functional teams to translate strategy into tangible roadmaps and standards.

• hybrid or remote working
• flexible working arrangements
• Accessibility Concierge

• Define and communicate security architecture, target state, standards and control requirements
• Embed security considerations in design, procurement, implementation and operational transitions
• Collaborate with Infrastructure and Cloud teams to integrate security controls into platform design and processes
• Govern network security controls including segmentation, firewalls, secure connectivity, remote access and monitoring
• Oversee identity and access management designs to ensure secure, scalable and auditable access
• Review security designs and changes for compliance with policies and architecture patterns
• Lead or contribute to root-cause analyses post-security incidents to drive improvements

• Significant experience in cyber security, security or infrastructure architecture
• Ability to design and govern security controls across on-prem, cloud, SaaS and hybrid environments
• Cloud security expertise in Azure, AWS and/or GCP
• Experience defining security strategies, roadmaps and technical control requirements
• Proficiency in security reviews, risk assessments, threat modelling and design assurance
• Experience supporting large-scale transformation programmes and technology change
• Leadership or mentoring capability for technical teams or delivery partners

• stakeholder management
• collaboration
• strong communication
• Security architecture across on-prem, cloud and hybrid
• Cloud security principles for Azure, AWS and/or GCP
• Identity and access management governance