Prism Digital
Security Assurance Architect - Azure Cloud Environment
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Assurance Architect | Azure Cloud Security, Regulatory Assurance | Established Payments Business Building a New B2B Bank
Day rate: £750 p/d
Outside IR35
Location: Remote, with 1-2 days per month in London
Contract length: 6 months
I'm working with an established international payments business that's building a new B2B bank, and they need a security assurance architect to check their Azure cloud + Temenos infrastructure is complaint for USA financial services regulations.
You do not have to have experience specifically with the USA Financial Services regulations, but you will have had to have had experience of financial services regulations from other countries as this knowledge will be transferable to the USA market.
In this contract you will be checking the cloud infrastructure is compliant across; FFIEC, state banking department, Federal Reserve, OCC/FDIC, NY DFS Part 500 Cybersecurity Regulation (23 NYCRR 500), Federal Reserve Requirements eg Operating Circular 5, NIST, ISO27001, FFIEC, NY DFS, SOC 2 etc.
This is assurance, not build. If you want to be architecting and deploying the controls yourself, you'll find this frustrating. It also needs someone comfortable working on their own initiative, because the team around you is a couple of security engineers and analysts rather than a department.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Non-Negotiables
- Regulatory interpretation – reading regulation and saying what it means in practice for the Azure cloud build. US, UK, EU or any other financial service regulation experience is ok
- Azure: hands-on cloud architecture knowledge
- Security architecture across network, cloud, application and data, gained in financial services
- Architecture and data-flow diagrams clear enough to put in front of an auditor
- Threat modelling and attack surface analysis: running it, then writing it up
- Evidence trackers: building and maintaining large audit documentation sets for a regulatory programme
- Control assurance: judging whether what has been built actually works, and saying so plainly
- At least one of financial NIST, ISO 27001, SOC 2, FFIEC or NY DFS Part 500 or other country equivalents are OK
- 5+ years in security or enterprise architecture
What You'll Work With
- A newly built Azure cloud and platform estate
- A SaaS core banking platform
- Banking regulation across multiple jurisdictions, including US requirements
- Penetration test findings and what they mean for the control set
- An in-house infrastructure and cloud team who build what you assess
- A security lead who needs your work to sign off with confidence
Nice to Haves
- FFIEC IT Examination Handbook, particularly Information Security and Architecture, Infrastructure & Operations
- NY DFS Part 500, including CISO reporting, MFA, encryption and third party requirements
- Preparing documentation for a charter, licence application or regulatory examination
- New bank builds or banking authorisation programmes
- SaaS core banking platform migrations
- Penetration testing oversight and remediation tracking
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Why Join / Projects
You're assessing infrastructure that's new, not untangling twenty years of accumulated decisions. The estate has been built properly, and your job is to prove it, find the gaps, and produce the evidence that lets the bank be regulated for the USA market.
Day to day you'll map the Azure and platform controls back to the regulations the bank has to meet, then produce the artefacts that prove it: architecture and data-flow diagrams an examiner can follow, threat models and attack surface analysis, and an evidence tracker that holds the whole control set together. You'll pick up penetration test findings and work out what they change. You report to the security lead with no layers in between, so decisions happen in a conversation rather than a committee.
They're moving quickly on this one, so apply and I'll give you a call to talk it through.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location