Cyber Security Architect - OutsideIR35

GCS Recruitment; United Kingdom; On-site; GBP 101,475 - 166,050; Full time

Job summary

GCS Recruitment is seeking an experienced Security Architect Consultant to advise on security architectures across a complex digital estate for a major UK transport programme. You will review CSIAs, assess threat models, and guide secure design through delivery in a regulated environment.

The role requires stakeholder management, strong communication, and the ability to provide practical security recommendations across network, VPN, firewall, cloud, and infra domains.

Qualifications

• Proven experience as Security Architect / Cyber Security Consultant in complex environments.
• Strong background in security architecture, risk assessments and technical security reviews.
• Experience producing security impact assessments or equivalent security assurance docs.
• Ability to assess technical solutions and provide actionable security recommendations.
• Understanding of network security, firewalls, VPNs, cloud and infra security.

Responsibilities

• Review and refresh CSIAs across live digital products and services.
• Assess threat models and security architectures to reflect current risks.
• Provide security architecture guidance from design through to delivery.
• Conduct security risk assessments and recommend improvements.
• Support technical teams with secure design reviews and architectural assurance.
• Advise on security across network, VPN, firewall, cloud, and infra areas.
• Work with DevOps to embed security in the delivery lifecycle.
• Produce security documentation, architecture recommendations and risk plans.
• Support governance and security assurance processes.

Skills

Security architecture

Threat modelling

Risk assessments

Security reviews

Stakeholder management

Job description

Security Architect - Consultant Advisory

12-Month Contract | Outside IR35 | Hybrid (2 days per week on-site)

Location: West London / Greater London

We are supporting a major UK transport infrastructure organisation undergoing a significant programme of cyber security improvement and technology transformation.

We are seeking an experienced Security Architect Consultant to provide advisory support across a complex digital estate, reviewing security architectures, assessing risks, and supporting the delivery of security improvements across critical technology platforms.

This role will involve working with technical teams, architects, and senior stakeholders to review existing security controls, improve security design practices, and support the implementation of secure technology solutions across a highly regulated environment.

Key Responsibilities

• Review and refresh existing Cyber Security Impact Assessments (CSIAs) across a portfolio of live digital products and services.
• Assess existing threat models and security architectures to ensure they reflect current risks and technology changes.
• Provide security architecture guidance across projects from initial design through to delivery.
• Conduct security risk assessments and provide recommendations for security improvements.
• Support technical teams with secure design reviews and architectural assurance.
• Review and advise on security improvements across areas including:
  • Network security
  • Firewall technologies
  • Secure remote access / VPN solutions
  • Virtualisation environments
  • Security monitoring and endpoint protection tooling
  • Identity and access controls
  • Infrastructure security
• Work with engineering and DevOps teams to ensure security is embedded throughout the delivery lifecycle.
• Produce clear security documentation, architectural recommendations, and risk treatment plans.
• Support governance activities and security assurance processes.

Required Experience

• Proven experience working as a Security Architect / Cyber Security Consultant within complex enterprise environments.
• Strong background in security architecture, risk assessments and technical security reviews.
• Experience reviewing and producing security impact assessments or similar security assurance documentation.
• Ability to assess technical solutions and provide practical security recommendations.
• Strong understanding of:
  • Network security architecture
  • Firewalls and secure connectivity
  • VPN technologies
  • Security monitoring solutions
  • Endpoint security controls
  • Cloud and infrastructure security
• Experience working across large-scale transformation or improvement programmes.
• Excellent stakeholder management and communication skills.

Desirable Experience

• Experience within aviation, transport, critical national infrastructure (CNI), or other highly regulated sectors.
• Previous experience supporting environments with operational technology (OT) considerations.
• Familiarity with safety‑critical systems and complex infrastructure environments.
• Experience working with DevOps / continuous improvement teams.
• Existing SC Clearance or ability to obtain SC Clearance.

Contract Details

• Contract Length: 12 months
• IR35 Status: Outside IR35
• Working Pattern: Hybrid - 2 days per week on-site
• Start Date: August / September
• Rate: Competitive day rate available

This is an excellent opportunity for a Security Architect to support a high‑profile cyber improvement programme within a complex, mission‑critical environment.