Enterprise Information Security Architect

ZipRecruiter; Oxford; On-site; GBP 60,000 - 100,000; Full time

Job summary

A leading social enterprise in the UK seeks an Enterprise Information Security Architect to lead security governance and assurance. This role involves working closely with architects and IT leaders to ensure that security measures are integrated into technology decisions from the start. You will be pivotal in shaping a resilient technology landscape while ensuring compliance with organizational policies and regulations. Ideal candidates possess strong risk management skills and relevant certifications to navigate complex security environments successfully.

Benefits

Competitive salary with annual review

Pension with matched contributions up to 7%

Up to 35 days holiday entitlement

Cashback plan for healthcare costs

Colleague bonus scheme

Training and development opportunities

Additional discounts and offers

Qualifications

• Proven experience providing independent security or architectural assurance.
• Strong understanding of secure and privacy-by-design principles.
• Experience in risk or GRC functions.

Responsibilities

• Shape information security architecture and governance.
• Guide decision-making on secure technology designs.
• Provide independent assurance for technological solutions.

Skills

Stakeholder management

Communication

Cybersecurity knowledge

Risk management

Education

Relevant professional certification (e.g., TOGAF, SABSA, CISSP, CISM)

Job description

Job Description

At Places for People, we hire People, not numbers! If you like the sound of one of our jobs, please apply — you could be just who we''re looking for! Experience and track record are important, but we''re more interested in hiring someone who embodies our People Promises: doing the right thing, being enthusiastic and motivated to grow, believing in community spirit, respecting others, and enjoying their work. As the UK''s leading Social Enterprise, we are dedicated to creating inclusive and thriving communities for our customers and employees.

Join a community that cares about you!

More about your role

The Enterprise Information Security Architect, as part of the second line of defence, provides expert oversight and strategic challenge to ensure the organisation''s systems, services, and technology programmes are secure by design.

This role acts as a trusted risk advisor to enterprise and solution architects, IT leaders, and change teams, ensuring security, resilience, and data protection are embedded into architecture decisions from the outset. It provides independent assurance that technology solutions align with organisational policies, risk appetite, and regulatory obligations, helping to reduce exposure and build long-term security maturity.

Key responsibilities include shaping information security architecture, governance, supporting secure design patterns, and guiding the organisation towards consistent, risk-informed decision-making.

The Essential Criteria for this role

• Proven experience in providing independent security or architectural assurance across IT change, enterprise architecture, or transformation programmes.
• Strong understanding of secure-by-design and privacy-by-design principles, with the ability to challenge and guide design decisions against risk appetite.
• Knowledge of cyber and information security risks, including data protection, cloud security, and control assurance in complex environments.
• Excellent stakeholder management and communication skills, with confidence to engage and influence architects, IT leadership, and governance forums.
• Relevant professional certification (e.g., TOGAF, SABSA, CISSP, CISM) or equivalent experience in enterprise or security architecture within a risk or GRC function.

More about you

You are a strategic thinker with a deep understanding of architecture, cyber, or information security. You know that secure design is fundamental to building trust, resilience, and business value. You are comfortable operating in the second line of defence or a similar GRC function, with the confidence to challenge constructively, guide decision-making, and influence architectural outcomes.

You excel at translating complex security risks into practical design principles and can navigate technical detail, governance forums, and business conversations with ease. You understand the importance of aligning technology decisions with risk appetite and regulatory expectations, without hindering progress.

Above all, you bring credibility, clarity, and a calm, professional presence to fast-paced environments. You see the bigger picture and are motivated by helping the organisation make safer, smarter decisions by design.

The Benefits

We are a large, diverse, and ambitious business offering challenging opportunities.

Our comprehensive benefits package includes:

• Competitive salary, with annual review
• Pension with matched contributions up to 7%
• Excellent holiday entitlement — up to 35 days (including bank holidays), with options to buy or sell leave
• Cashback plan for healthcare costs — up to £500 per year
• Colleague bonus scheme at 2%
• Training and development opportunities
• Additional perks, including discounts and offers from shops, cinemas, and more

What''s next?

If you meet the criteria and are ready to advance your career, click apply. You will be redirected to our careers site to discover more about the role, read a full job description, and apply directly.

If you are a Places for People customer seeking support with your application, please contact our skills and employment team at [e-mail].

Recruitment agencies, please note we operate a PSL and do not accept cold calls.

At Places for People, safeguarding is everyone''s responsibility. We are committed to creating safe communities by protecting children, adults, and at-risk individuals from harm, abuse, and neglect.

We follow robust safeguarding policies, including pre-employment checks such as DBS where applicable, to ensure a safe working environment.

By joining us, you are expected to contribute to our safeguarding culture, adhere to policies, and report concerns to protect our communities.