Job Title: Technical Cyber Security Architect (SC)

Location: Remote (UK-based) with travel as required
Employment Type: Full-time, Permanent
Security Clearance: Candidates must hold SC level clearance and meet UK residency requirements

About the Role

We’re looking for a Security Architect to join our client; a leading Cyber Consultancy that’s shaping the future of secure digital transformation. This is a unique opportunity to work alongside expert peers in Secure Architecture and Risk Planning, contributing to a culture of collaboration, innovation, and continuous learning. You’ll help clients define and implement security architectures that protect their assets and enable confident decision-making.

Key Responsibilities

• Providing expert secure design advice and guidance to projects from the Discovery phase and throughout the life cycle through to disposal.
• Ensuring adherence of solution and product designs to security standards, blueprints, and architectural patterns.
• Validating the design, implementation, and effectiveness of security controls to confirm they meet their intended objectives.
• Delivering security architecture to support deployment of large data-driven services into private and public cloud environments.
• Designing and scoping IT Health Checks which will identify principal security concerns for service-lines.
• Reviewing outcomes of the ITHC and providing advice and guidance, and where required production of an action plan for vulnerabilities identified with clear recommendations and outcomes to mitigate and address.
• Delivering risk, threat modelling and analysis for systems, applications, and infrastructure.
• Designing proportional security controls to bring risk within appetite, leveraging native cloud technologies.
• Producing security architecture design artefacts including standards and blueprints.
• Promoting the adoption of architectural and Secure By Design principles to reduce information risk.
• Identifying security risks that arise from potential solution architectures, advising and assuring alternate solutions or countermeasures to mitigate identified information risks.