Cyber Security Architect

Starrycare Recruitment Services; Newport; On-site; GBP 90,000 - 120,000; Full time

Job summary

Starrycare Recruitment Services is seeking a Cyber Security Architect to design and govern enterprise security across on‑prem, cloud, and hybrid environments in Newport. You will align with leadership to define strategy, ensure compliance with key standards, and implement Secure by Design principles to protect critical systems and data.

You will lead security architecture efforts, collaborate with technical and business teams, and drive governance, risk and compliance across the organisation

Qualifications

• Proven enterprise security architecture experience across cloud, on-prem, and hybrid environments.
• Experience with ISO 27001, PCI DSS, GDPR, GovAssure, CAF, and related frameworks.
• Ability to design secure enterprise solutions balancing security and business needs.
• Strong stakeholder communication and cross-functional collaboration.

Responsibilities

• Design and maintain enterprise security architecture aligned with business objectives.
• Ensure compliance with security standards and regulations including ISO 27001, PCI DSS, GDPR, GovAssure, CAF, and Secure by Design principles.
• Develop and manage the security architecture compliance roadmap with technical and business teams.
• Provide expert security guidance during design, implementation, and operation of applications, infrastructure, and cloud services.
• Evaluate security risks and recommend appropriate controls and solutions.
• Coordinate security assurance activities for GovAssure assessments and audits.
• Promote security awareness and secure by design across teams.
• Assist with cyber security incident response by identifying weaknesses and improvements.

Skills

IAM

Cryptography

Network Security

Secure by Design

GRC

CIA triad

Cloud Security

Governance

Risk Assessment

Security Protocols

Stakeholder Management

Communication

Tools

Azure

Job description

Starrycare Recruitment Services | Full time

Cyber Security Architect

Newport, United Kingdom | Posted on 07/08/2026

• Country United Kingdom

Job Description

Responsible for designing and governing enterprise security architecture across on-premises, cloud, and hybrid environments. Work closely with security leadership and technical teams to define security strategy, ensure compliance with government and industry standards, and implement Secure by Design principles that protect critical systems, infrastructure, and data.

Key Responsibilities

• Design and maintain enterprise security architecture aligned with business objectives and government security frameworks.
  
• Ensure compliance with security standards and regulations including ISO 27001 , PCI DSS , GDPR , GovAssure , NCSC Cyber Assessment Framework , and Secure by Design principles.
  
• Develop and manage the security architecture compliance roadmap in collaboration with technical and business teams.
  
• Provide expert security guidance during the design, implementation, and operation of applications, infrastructure, and cloud services.
  
• Evaluate security risks and recommend appropriate security controls and technical solutions.
  
• Support the adoption of Secure by Design practices across Digital, Data and Technology (DDaT) teams.
  
• Coordinate security assurance activities and evidence collection for GovAssure assessments and audits.
  
• Assess the security impact of proposed technology changes and provide recommendations to stakeholders.
  
• Promote security awareness and influence teams to adopt security best practices.
  
• Assist with cyber security incident response by identifying architectural weaknesses and recommending improvements.
  
• Continuously monitor emerging cyber threats, vulnerabilities, technologies, and regulatory changes to improve the organisation's security posture.
  
• Collaborate with internal teams, external partners, and stakeholders to develop secure, resilient, and compliant solutions.
  

Requirements

• Enterprise Security Architecture
  
• Cloud Security (Azure, Hybrid and On-Premises)
  
• ISO 27001
  
• PCI DSS
  
• GDPR
  
• GovAssure Framework
  
• NCSC Cyber Assessment Framework (CAF)
  
• Secure by Design
  
• Governance, Risk and Compliance (GRC)
  
• Risk Assessment and Risk Management
  
• Identity and Access Management (IAM)
  
• Authentication and Authorisation
  
• Cryptography
  
• Network Security
  
• Security Protocols
  
• Security Controls Design
  
• Cyber Security Compliance
  
• Information Security
  
• Strong understanding of Governance, Risk and Compliance (GRC).
  
• Comprehensive knowledge of the Confidentiality, Integrity, and Availability (CIA) triad.
  
• Ability to design secure enterprise solutions across cloud and hybrid environments.
  
• Excellent analytical, problem-solving, and decision-making skills.
  
• Strong communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders.
  
• Ability to influence security strategy and drive Secure by Design principles across the organisation.
  
• Experience balancing business objectives with security requirements.
  
• Self-motivated with a commitment to continuous learning and keeping current with emerging cyber threats and technologies.
  
• Strong stakeholder management and cross-functional collaboration skills.