The Role

Lead the development of security architecture practices across a complex organisation, working with technology, risk and business teams so that security requirements are built into projects and platforms.

• Provide architecture assurance for major business and technology change
• Promote secure-by-design principles across cloud, infrastructure, data, identity and operational environments

What You'll Be Doing

• Set and maintain security architecture principles, standards, patterns and reference designs
• Provide security architecture input to enterprise systems and transformation programmes
• Shape Identity and Access Management (IAM) design, including access governance and segregation of duties
• Assess cloud, infrastructure, network, data and integration designs for security risks
• Review third-party and delivery-partner proposals, recommending proportionate controls and mitigations
• Translate privacy, regulatory and compliance obligations into practical technical requirements
• Document architecture decisions, risk acceptances, exceptions and governance outcomes
• Support security design across operational technology, business integrations, acquisitions and emerging technologies

What We're Looking For

• Experience developing and applying security architecture standards, principles and design patterns
• Strong understanding of IAM, access governance and segregation of duties
• Experience assessing or designing secure cloud, infrastructure, network, integration and data solutions
• Working knowledge of relevant security and privacy frameworks, such as UK GDPR, ISO 27001/27002, CIS Controls and Cyber Essentials
• Confidence providing technical assurance and constructively challenging third-party designs
• Strong communication and stakeholder-management skills across technical and non-technical teams
• CISSP or a comparable professional security qualification

Nice to Have

• Experience with SAP, ERP or other enterprise business platforms
• Involvement in complex technology change or transformation programmes
• Exposure to operational technology or industrial environments
• Awareness of AI security, risk and governance
• Additional qualifications such as SABSA, TOGAF, CCSP, CCSK, CISM or CRISC
• Familiarity with standards such as ISO 22301, ISO 42001, NIST CSF or IEC 62443

Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy.

To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.