Enterprise Security Architect

Gazelle Global; Greater London; On-site; GBP 110,000 - 150,000; Full time

Job summary

Gazelle Global is seeking a seasoned Senior Enterprise Security Architect to lead CIS Controls implementation across a large enterprise. You will define the security architecture and roadmap, aligning technical controls to CIS and maturing automated security posture.

You will drive secure cloud patterns across AWS/Azure/GCP, work with DevOps to automate security configurations, and communicate risks and progress to executives. This is a strategic security leadership role based in the UK.

Qualifications

• Senior-level security leadership with enterprise-scale experience.
• Proven track record delivering CIS controls and secure cloud architectures.
• Experience with Security as Code and automated security configurations.

Responsibilities

• Lead end-to-end design and implementation of CIS Controls across on-prem, hybrid, and multi-cloud environments.
• Map existing controls to CIS framework and define secure architecture patterns.
• Automate security configurations and patching; drive vulnerability management.

Skills

Cybersecurity leadership

Security architecture

Cloud security

Security as Code

IaC scripting

Identity & Access Management

Zero Trust

Stakeholder communication

Threat modelling

Tools

Terraform

Ansible

Bicep

Okta

Entra ID

Ping

Tenable.io

Qualys

Rapid7

Splunk

Microsoft Sentinel

Job description

The Role We are looking for a seasoned Senior Enterprise Security Architect to lead the implementation of the CIS Critical Security Controls across an enterprise environment. You will be responsible for defining the security architecture and roadmap, aligning existing technical controls to the CIS framework and helping transition the organisation towards a robust, measurable and automated security posture. The role combines enterprise security architecture, cloud security, infrastructure hardening, security automation, vulnerability management and senior stakeholder engagement.

Responsibilities

• Lead the end-to-end design and implementation roadmap for CIS Critical Security Controls v8 or latest.
• Assess current technical controls and map them against the CIS framework.
• Define secure architecture patterns across on-premises, hybrid and multi-cloud environments.
• Apply security principles and CIS Benchmarks across AWS, Azure and GCP environments.
• Develop enterprise-wide security policies, standards and procedures aligned to CIS Implementation Groups.
• Work closely with DevOps, Network Engineering and IT Operations teams to automate security configurations.
• Drive automated patching, system hardening and configuration management.
• Design solutions for automated hardware and software asset discovery and inventory.
• Establish and mature enterprise vulnerability management processes.
• Support continuous identification, prioritisation and remediation of security risks.
• Act as a senior security SME, communicating security requirements, risks and progress to both technical teams and executive stakeholders.
• Define security KPIs and measures to demonstrate control effectiveness and transformation progress.
• Promote an automation-first approach to enterprise security controls.

Qualifications

Relevant certifications may include:

• CISSP / CISSP-ISSAP
• CISM
• TOGAF
• AWS Certified Security - Specialty
• Microsoft Certified: Cybersecurity Architect Expert
• Google Professional Cloud Security Engineer
• CISA / GSEC / GCIH

Experience leading large-scale, cross-functional security transformation programmes is also highly desirable.

Required Skills

• Strong senior-level experience in Cybersecurity and Security Architecture.
• Deep hands-on experience implementing CIS Critical Security Controls within large enterprise environments.
• Enterprise security architecture experience across infrastructure and cloud environments.
• Strong understanding of secure cloud migration and cloud-native security practices.
• Experience with Security as Code and automated security configuration.
• Strong scripting or Infrastructure as Code experience using technologies such as Python, PowerShell, Terraform, Ansible or Bicep.
• Expert knowledge of CIS Benchmarks for operating systems, cloud platforms and network devices.
• Strong understanding of IAM, Zero Trust, RBAC and ABAC.
• Experience working with senior and executive stakeholders.
• Ability to communicate complex security risks clearly to technical and business audiences.

Technical Skills

• AWS security, including Control Tower and SCPs
• GCP security and Organisation Policy Service
• Terraform, Ansible and/or Bicep
• GitOps and automated security configuration
• Identity & Access Management
• Zero Trust Architecture
• RBAC / ABAC
• Okta, Entra ID and/or Ping
• Security Operations
• Vulnerability management
• Tenable.io, Qualys and/or Rapid7
• EDR/XDR
• CrowdStrike and/or SentinelOne
• SIEM/SOAR
• Splunk, Microsoft Sentinel and/or Google Chronicle
• Automated security response and monitoring
• Infrastructure & Network Security
• Linux and Windows Server hardening
• Automated configuration management
• CMDB and asset discovery
• NSX, Illumio and/or cloud-native security groups