Gazelle Global
Senior Enterprise Security Architect
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Senior Enterprise Security Architect
Location
London
Working Pattern
Office-based, 4 days per week
Contract
6 months
Travel
Travel to sites as required for workshops
Position
1
The Role
We are looking for a seasoned Senior Enterprise Security Architect to lead the implementation of the CIS Critical Security Controls across an enterprise environment. You will be responsible for defining the security architecture and roadmap, aligning existing technical controls to the CIS framework and helping transition the organisation towards a robust, measurable and automated security posture. The role combines enterprise security architecture, cloud security, infrastructure hardening, security automation, vulnerability management and senior stakeholder engagement.
Key Responsibilities
- Lead the end-to-end design and implementation roadmap for CIS Critical Security Controls v8 or latest.
- Assess current technical controls and map them against the CIS framework.
- Define secure architecture patterns across on-premises, hybrid and multi-cloud environments.
- Apply security principles and CIS Benchmarks across AWS, Azure and GCP environments.
- Develop enterprise-wide security policies, standards and procedures aligned to CIS Implementation Groups.
- Work closely with DevOps, Network Engineering and IT Operations teams to automate security configurations.
- Drive automated patching, system hardening and configuration management.
- Design solutions for automated hardware and software asset discovery and inventory.
- Establish and mature enterprise vulnerability management processes.
- Support continuous identification, prioritisation and remediation of security risks.
- Act as a senior security SME, communicating security requirements, risks and progress to both technical teams and executive stakeholders.
- Define security KPIs and measures to demonstrate control effectiveness and transformation progress.
- Promote an automation-first approach to enterprise security controls.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential Experience
- Strong senior-level experience in Cybersecurity and Security Architecture.
- Deep hands-on experience implementing CIS Critical Security Controls within large enterprise environments.
- Enterprise security architecture experience across infrastructure and cloud environments.
- Strong understanding of secure cloud migration and cloud-native security practices.
- Experience with Security as Code and automated security configuration.
- Strong scripting or Infrastructure as Code experience using technologies such as Python, PowerShell, Terraform, Ansible or Bicep.
- Expert knowledge of CIS Benchmarks for operating systems, cloud platforms and network devices.
- Strong understanding of IAM, Zero Trust, RBAC and ABAC.
- Experience working with senior and executive stakeholders.
- Ability to communicate complex security risks clearly to technical and business audiences.
Technical Skills
Cloud & Infrastructure Security
- AWS security, including Control Tower and SCPs
- Azure security, including Azure Policy
- GCP security and Organisation Policy Service
- Terraform, Ansible and/or Bicep
- GitOps and automated security configuration
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Identity & Access Management
- Zero Trust Architecture
- RBAC / ABAC
- Enterprise IAM
- Okta, Entra ID and/or Ping
Security Operations
- Vulnerability management
- Tenable.io, Qualys and/or Rapid7
- EDR/XDR
- CrowdStrike and/or SentinelOne
- SIEM/SOAR
- Splunk, Microsoft Sentinel and/or Google Chronicle
- Automated security response and monitoring
Infrastructure & Network Security
- CIS Benchmarks
- Linux and Windows Server hardening
- Automated configuration management
- CMDB and asset discovery
- Network micro-segmentation
- NSX, Illumio and/or cloud-native security groups
- Encryption and key management
- TLS 1.3, AES-256 and HSMs
Certifications
- Relevant certifications may include:
- CISSP / CISSP-ISSAP
- CISM
- TOGAF
- AWS Certified Security - Specialty
- Microsoft Certified: Cybersecurity Architect Expert
- Google Professional Cloud Security Engineer
- CISA / GSEC / GCIH
Experience leading large-scale, cross-functional security transformation programmes is also highly desirable.
For more information or to apply directly, please email [I review applications daily and will contact shortlisted candidates as quickly as possible](mailto:[email address not provided]).
Desired Skills and Experience
- CIS Critical Security Controls
- Enterprise Security Architecture
- CIS Benchmarks
- Cloud Security
- AWS Security
- Azure Security
- GCP Security
- Security as Code
- Terraform
- Vulnerability Management
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location