We are seeking a Security Architect to join the BPS Security Architecture & Assurance (Security Governance) capability within highly regulated UK Government and financial services environments.
Working across complex, business-critical platforms and alongside other Security Architects and Assurance Managers, you will ensure security is embedded by design and evidenced throughout delivery. The role focuses on judgement, influence and risk-based decision-making, balancing security, business and operational priorities to deliver defensible architecture, assurance outcomes and risk assessments.
You will provide security architecture oversight and assurance across client programmes, projects, services and third-party suppliers within complex enterprise and regulated environments. The role determines whether proposed solutions, designs and services meet organisational security requirements, regulatory obligations and good industry practice. It does not design or implement technical solutions; instead, it provides independent review, governance, risk assessment and security approval throughout the solution lifecycle.
Core Responsibilities
- Participate in Architecture Review Boards and provide security review and sign-off.
- Define and enforce secure architecture standards, reference patterns and mandatory security controls.
- Review and approve security-relevant designs and major technical changes.
- Act as a security design authority across infrastructure, platforms and applications.
- Conduct independent security architecture reviews against security standards, policies and control frameworks.
- Perform security risk and threat assessments and support risk treatment decisions.
- Assess third-party suppliers, SaaS platforms and cloud services using assurance evidence and independent testing reports.
- Ensure alignment with NIST CSF, NCSC guidance, CIS Controls, ISO/IEC 27001, UK GDPR and UK Government Security Classifications.
- Coordinate and support IT Health Checks, ensuring findings are reviewed, risk-assessed and remediated.
- Provide pragmatic security guidance and act as a trusted adviser to delivery and business stakeholders.
Essential Skills and Experience
- Significant experience in information security, cyber security, information security architecture or DevOps.
- Experience providing security assurance, architecture reviews or governance oversight.
- Strong understanding of security risk management and security control frameworks.
- Experience reviewing cloud, SaaS and enterprise technology architectures.
- Excellent stakeholder management, communication and influencing skills.
Desirable Certifications and Qualifications
- CCSP, CISSP or CISM.
- Architecture methodology qualifications such as Unified Engineering Methodology, TOGAF Foundation or SABSA.
- ISO 27001 and other professional qualifications.
This UK-based role offers remote working with occasional UK domestic travel. To be eligible for SC clearance, candidates must have lived and worked continuously in the UK for the past five years.
Benefits
- Pension contributions matched up to 10%.
- Private medical cover.
- Income protection.
- Life assurance.
- 25 days paid leave plus national holidays.
- Flexible benefits programme.