Security Architect Consultant

As a Security Architect, you will shape secure end-to-end IT solutions by aligning security design with business objectives and risk appetite. You’ll work within Security Architecture practices to model threats, assess risks, and ensure controls align with Secure by Design and applicable standards. You’ll produce design artifacts, influence senior stakeholders, and help grow our security consulting capabilities. This role offers variety across clients, technologies, and security challenges, with a clear impact on risk posture and governance.

• flexible work options
• learning and development opportunities
• tailored benefits for wellbeing
• inclusive and diverse workplace
• disability confident employer
• career growth opportunities

• Contribute to secure end-to-end solution designs and reference architectures
• Identify objectives, risks, and compliance obligations; model threats and assess risk
• Articulate design recommendations at architecture assurance gates and through documentation
• Develop and present risk assessments, options papers, and stakeholder presentations
• Mentor junior team members and help grow the Security Practice capabilities
• Support client proposals and go-to-market collateral for security consulting offerings
• Ensure alignment with Secure by Design, security policies, and industry frameworks
• Coordinate with governance, risk, and compliance functions and ensure evidence of controls and KPIs
• Engage with clients across 1st-3rd lines of defense on cyber security, data privacy, and regulatory considerations
• Drive continuous improvement of security processes, controls, and metrics
• Contribute to ongoing documentation of security controls and process standards
• Thrives in consulting with diverse clients and technologies; apply secure design concepts across projects

• Awareness of industry security frameworks (NIST CSF, NIST 800-53, NCSC CAF)
• Good networking knowledge (switching, routing, firewalls)
• Experience with cloud design concepts and native security capabilities (AWS, Azure)
• Understanding of modern security concepts, threat intelligence, and vulnerability management
• Knowledge of security testing and vulnerability management (pen testing, CVSS/CVE)
• Experience with standards such as ISO 27001/27002/27017/27108
• Minimum ~5 years in cyber security
• Certifications such as CISSP, CISM, CCSP, CRISC or equivalent
• Experience with AD, Cryptography, IAM, PKI, SIEM, SOAR, virtualization (VMware) or similar
• Ability to communicate with senior technical and non-technical stakeholders
• SC level UK security clearance or ability to obtain (British Nationals)

• Strong teamwork and attention to detail
• Excellent written and verbal communication
• Self-motivation and accountability
• NIST CSF, NIST 800-53, NCSC CAF familiarity
• Cloud platforms: AWS and/or Microsoft Azure
• Security controls design and threat modelling