National Highways
Security Governance, Risk & Compliance Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About the job
As part of the development of our Digital Services function, we are recruiting to strengthen internal digital capability within Cyber Security, Digital Operational Services, and Digital Corporate and Shared Services. These roles are central to building sustainable in-house expertise that supports the management, development and delivery of digital solutions across the transport network.
As a Senior Technical Architect in the Enterprise Security Architecture team at National Highways, you will play a key role in embedding security across our digital ecosystem, helping to ensure our IT, Operational Technology (OT) and business services are designed, delivered and operated securely. Working within Digital Services and alongside the wider Security teams, you will be pivotal in driving the integration of security into architectures, technologies and processes to support the delivery of resilient, compliant and business-focused services.
You will work across programmes, projects and operational environments, providing expert advice on security architecture, risk, technology and governance. This is an opportunity to influence how security is built into our services from the outset, while helping us continuously improve our security capability across a complex and evolving technology landscape.
This is a hybrid role, requiring two days per week in the office, and can be based at any National Highways office location across the UK, with some travel to attend team meetings.
Successful candidates will be required to hold or be willing to obtain SC clearance before starting employment. Five years’ UK residency is normally required for the vetting process, although individual circumstances will be considered as part of the recruitment process.
- Provide strategic security architecture advice across IT, OT and business services, identifying security gaps, emerging risks and opportunities to influence technology roadmaps, investment decisions and digital transformation.
- Contributing to and maintenance of secure architecture design and assurance, including the development and review of high-level and detailed designs, security risk assessments and the application of appropriate security controls, standards and principles.
- Provide expert technical guidance across Cloud and Operational Technology environments, supporting effective approaches to configuration management, patching, access management, disaster recovery and incident response.
- Drive continuous improvement of enterprise security frameworks, policies and practices, incorporating industry developments, performance and usability considerations while maintaining accurate documentation and compliance records.
- Support the secure lifecycle management of services and systems, including transition and decommissioning, ensuring security requirements, compliance and auditability are maintained throughout.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
About you
- Proven experience in security architecture, with the ability to translate security strategy and risk into practical architectural solutions that support organisational objectives and digital transformation.
- Strong knowledge of security, regulatory and industry frameworks (e.g. including ISO 27001, NIST, GDPR and IEC 62443), with the ability to apply these across business, IT and OT environments.
- Demonstrable experience designing and evaluating secure Cloud and IT architectures, including identity and access management, encryption and network segmentation.
- Advanced experience in security risk assessment, threat modelling and vulnerability analysis across complex IT and OT environments.
- Practical experience applying Secure-by-Design principles, overseeing security testing, advising on compliance and providing technical guidance during security incidents.
About us
Here at National Highways, we manage and improve England’s motorways and major A roads, helping our customers have safer, smoother and more reliable journeys. Our priorities are safety, customers and delivery, and at the core of this, are our values of passion, integrity, safety, teamwork and ownership.
The Digital Services Directorate is helping to reshape the way National Highways operates by delivering digital, data, and technology services across all areas, from frontline to back office, in a modern and efficient manner. Our vision is to develop integrated information and technology that empowers our colleagues and provides real-time information to our customers, as well as integrating with intelligent vehicle and transport systems as they evolve, to enhance journey safety and reliability.
External candidates will be offered a starting salary at the lower end of the pay scale, while current employees will be appointed in accordance with our established pay policy.
We are committed to creating a diverse environment and welcome applicants from all backgrounds.
Why you should join us
At National Highways we believe in a connected country. We are passionate about creating a culture where colleagues feel connected, included and enjoy greater wellbeing to achieve this. We’re proud that as an organisation we are continually striving to do better and actively encourage and support our colleagues to do the same with their careers.
So, if you put safety first, take ownership of your work, show passion for what you do, work effectively in a team, and demonstrate integrity in how you do it – then you’ll be a great fit for our organisation.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
A connected and sustainable working approach has been adopted across National Highways. For some roles, this means being able to work in a hybrid way spending up to 60% of time working from a remote location such as home.
We offer many different ways to work flexibly and we’re open to discuss part-time working, job shares, and flexible start and finish times.
Please wait until the interview stage before asking us about flexibility, and we will explore what is possible.
Our benefits package
- Our total reward package includes basic salary, the potential for a performance related bonus.
- Contributory pension scheme with employer contribution of up to 10%.
- Annual Leave starting at 26 days (plus Bank Holidays) rising by 1 day each year up to 31 days (plus Bank Holidays).
- Flexible hours and an approach driven by connected and sustainable working which includes hybrid working.
- Life assurance of 4 times annual salary.
- Health and wellbeing support, including an Employee Assistance Programme, available 24/7 365 days and network of mental health first aiders. Plus access to a wellbeing app to enhance your self-care 24/7, Occupational health service and flu vaccines.
- A cycle to work scheme for the purchase of a bicycle and equipment for healthy, low carbon travel.
- Significant investment in your career development, through learning and development, talent management, coaching, mentoring and on job experience.
And we are
- Family friendly with enhanced maternity leave and pay, paternity leave (15 days), shared parental leave, adoption leave. Plus access to financial support for holiday play schemes and paid special leave (up to 5 days pa), eg for caring responsibilities.
- Money friendly with access to a discounts platform including over 3000 discounts for supermarkets, eating out, leisure, holidays. Alongside a financial wellbeing programme.
- Community friendly – offering paid leave to volunteer, 3 days basic/year.
If you are successful, it is key to know all offers of employment are subject to satisfactory completion of our pre-employment checks which include:
- Right to work check.
- 3 year employment history references.
- DBS criminal record check.
- Social media and adverse journalism check.
- Driving licence check (if applicable).
- Fit to work questionnaire (for all), followed by a medical check (if applicable).
- Qualifications and/or professional membership check (if applicable).
And finally
We reserve the right to close before the advertisement expires.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location