Enterprise Security Architect

CO_AFATI Apex Fund Services LLP; City Of London; On-site; GBP 95,000 - 150,000; Full time

Benefits offered by this job

Flexible work options

Global teams

Career growth opportunities

Job summary

Apex Group in London is seeking an experienced Enterprise Security Architect to design and guide secure technology solutions across the organization. You will build scalable, resilient systems that support business objectives and regulatory commitments.

The role requires 10+ years in cyber, 5–7 in architecture, hands-on cloud/security knowledge, and certifications. You will collaborate with groups, report to Group CISO, and shape the global security strategy.

Qualifications

• 10+ years in cybersecurity or infrastructure roles with 5–7 years in architecture/design/engineering.
• Hands-on exposure to AWS, Azure, IAM, API gateways, ZTNA, or data security tech.
• Strong knowledge of NIST, ISO 27001, MITRE ATT&CK, SOC2 and OWASP.
• Able to articulate risks and decisions to technical and non-technical audiences.
• Architectural certifications SABSA or TOGAF are essential; CISSP/CCSP or cloud certs desirable.

Responsibilities

• Serve as the security design authority for projects or architectural domains.
• Translate security policies into actionable design controls and guidance.
• Evaluate emerging technologies for alignment with enterprise security strategy.
• Conduct architecture risk assessments and threat modelling.
• Collaborate with infrastructure, application, and data teams for secure designs.
• Document security artefacts and align decisions with the tech roadmap.

Skills

AWS

Azure

IAM

API gateways

ZTNA

Data security

Education

SABSA

TOGAF

CISSP

CCSP

AWS/Azure Architect

Job description

The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers. Our business is unique in its ability to reach globally, service locally and provide cross-jurisdictional services. With our clients at the heart of everything we do, our hard-working team has successfully delivered on an unprecedented growth and transformation journey, and we are now represented by over circa 13,000 employees across 112 offices worldwide.Your career with us should reflect your energy and passion. That’s why, at Apex Group, we will do more than simply ‘empower’ you. We will work to supercharge your unique skills and experience. Take the lead and we’ll give you the support you need to be at the top of your game. And we offer you the freedom to be a positive disrupter and turn big ideas into bold, industry-changing realities. For our business, for clients, and for you

The Role

Apex is looking for an experienced Enterprise Security Architect to join our growing Security Architecture team. This role is pivotal in designing and guiding the implementation of secure technology solutions across the organization. You will help build scalable, resilient, and secure systems that support Apex’s business objectives and regulatory commitments.

Key Responsibilities

• Serve as the security design authority for assigned projects, initiatives, or architectural domains.
• Translate security policies and standards into actionable design controls and implementation guidance.
• Evaluate emerging technologies, products, and platforms for alignment with enterprise security strategy.
• Conduct architecture risk assessments and threat modelling to identify potential exposures.
• Collaborate with infrastructure, application, and data teams to ensure secure solution design and integration.
• Document and maintain security architecture artefacts, including diagrams, control mappings, and design decisions while aligned with Apex’s technology roadmap and business goals.
• Execute delegated tasks as deemed appropriate by the Group CISO and other empowered Group Cyber leadership authorities, ensuring timely and effective completion in alignment with organizational priorities.
• Support the Group Cyber Strategy end-to-end, driving alignment of all activities, decisions, and deliverables with strategic objectives and business outcomes.

Areas of Specialization

• Identity Security: Identity and access architecture across workforce, privileged, service, application and machine identities; identity governance, modern authentication, access lifecycle management, conditional access, PAM/PIM, federation, SSO, MFA, identity threat detection, and zero trust identity control design.
• AI & Blockchain Architecture: Secure architecture and governance for AI, machine learning, generative AI, agentic solutions, distributed ledger technologies and blockchain-enabled platforms; including model and data protection, AI risk controls, prompt and output security, smart contract assurance, tokenization, wallet/key management, privacy, auditability, regulatory alignment, and integration with enterprise identity, data, cloud and application security controls.
• Cloud & Infrastructure Security: Secure deployment and integration across hybrid/multi-cloud environments, network security, IaaS/PaaS/SaaS controls, and cloud governance.
• Security Architecture Advisory Services: Strategic and technical guidance across domains, aligning security architecture with business objectives. Focus areas include zero trust principles, risk-based decision-making, and security integration into digital transformation initiatives.

Required Experience & Skills

• Experience: 10+ years of overall experience in cybersecurity or infrastructure/application roles, with 5-7 years of experience in architecture, design, or engineering roles involving security. Proven experience architecting secure systems in large or complex enterprise environments.
• Technical Expertise: Hands-on exposure to one or more of: AWS, Azure, IAM, API gateways, ZTNA technologies or data security technologies. Strong understanding of security principles, design patterns, and defense-in-depth strategies.
• Knowledge of Standards: Strong knowledge of relevant security standards and frameworks such as NIST, ISO 27001, MITRE ATT&CK, SOC2 and OWASP.
• Communication Skills: Ability to articulate technical risks and architectural decisions to both technical and non-technical audiences.
• Certifications: Architectural qualifications (e.g., SABSA, TOGAF) are essential. Professional certifications (e.g., CISSP, CCSP, AWS/Azure Architect) are highly desirable.

Why Join Apex:

Opportunity to work with senior security professionals across multiple global teams. Exposure to modern technologies and enterprise-scale transformation projects. Flexible work options and a strong focus on team collaboration and growth. Opportunity to shape enterprise security architecture in a global organization.

About Apex Group We are dedicated to driving positive change in financial services while fuelling the growth and ambitions of asset managers, allocators, financial institutions, and family offices. Established in Bermuda in 2003, the Group has continually disrupted the asset serving industry through our investment in innovation and talent. Today, we set the pace in asset servicing and stand out for our unique single-source solution and unified cross asset-class platform which supports the entire value chain, harnesses leading innovative technology, and benefits from cross-jurisdictional expertise delivered by a long-standing management team and over 13,000 highly integrated professionals. We’re a people-powered business, and our people are full of ambition. Together, we’re inspired to lead the new era of data and tech enabled service. Bringing new products and services to market. Sharpening our client focus. Disrupting the market to exceed expectations. Innovating across a range of specialisms. With our focus on making a difference to our people, our planet and our society, you’ll experience more here than you would at most other companies. Prepare to accelerate. We’re a people-powered business with a vision to inspire a new era of service-led FinTech. We’re expanding globally and offering more to our clients. This means you get more opportunities to grow with us. So prepare to accelerate. We’ll make sure the time and effort you put in takes you further, faster. Positive change starts with you. We’re a people-powered business with a vision to inspire a new era of service-led FinTech. We’re expanding globally and offering more to our clients. This means you get more opportunities to grow with us. So prepare to accelerate. We’ll make sure the time and effort you put in takes you further, faster. The journey is yours to own. When you stretch yourself, you grow. We want you to explore ways of working that will see you thrive as part of something bigger. We’ll help you with a solid structure, challenging projects, vibrant networks, supportive colleagues and approachable leaders. All the things you need to own your unique journey.