Information Security Architect

DS Smith; City Of London; On-site; GBP 70,000 - 100,000; Full time

Job summary

A leading packaging company in London is seeking an Information Security Architect to enhance its enterprise security architecture. The role involves developing security models, advising on compliance, and collaborating with various teams. Ideal candidates should have extensive experience in information security and proficiency with the Microsoft security stack. This position offers competitive salary and bonuses.

Benefits

Competitive salary

Company bonus

Pension scheme

Life assurance

Income protection

25 days holiday plus bank holidays

Electric Car / Bike to Work schemes

Qualifications

• Extensive experience in information security architecture or design within large enterprise environments.
• Ability to develop security architecture artefacts ideally in the manufacturing sector.
• Experience working with external service and technology providers across the lifecycle.

Responsibilities

• Develop and maintain security architectural models, standards, and procedures.
• Monitor emerging technologies and assess their impact on security posture.
• Identify vulnerabilities, assess risks, and develop mitigation strategies.

Skills

Extensive experience in information security architecture

Proficiency with Microsoft security stack

Strong interpersonal and communication skills

Education

Professional certifications such as CISSP, CCSP, TOGAF

Tools

NIST

ISO-27001

Job description

About Us

Our Information & Technology (I&T) Digital Security organisation is on a mission to deliver scalable, flexible, and effective security services that support the evolving needs of our business. We operate as a centralised team, providing strategic security architecture and assurance across all business units, assets, and change initiatives. Our goal is to proactively mitigate threats and reduce risk exposure while enabling innovation and operational excellence.

We value collaboration, visibility, and strong partnerships both internally across I&T and business stakeholders, and externally with our technology partners. Our team is committed to maintaining a secure digital environment that aligns with regulatory requirements and industry best practices.

About the Role

As an Information Security Architect, you will play a key role in shaping and maintaining our enterprise security architecture. You’ll work closely with enterprise architects, functional area specialists, and security experts to ensure that all IT systems and platforms are designed with robust, scalable, and compliant security solutions.

Your responsibilities will include:

• Developing and maintaining security architectural models, standards, and procedures.
• Advising on security strategies to manage risks and ensure compliance with internal policies and external regulations.
• Supporting the creation of reference architectures and artefacts for enterprise security domains.
• Monitoring emerging technologies and assessing their impact on our security posture.
• Providing expert guidance to internal teams and stakeholders on security best practices, tools, and frameworks.
• Identifying vulnerabilities, assessing risks, and developing mitigation strategies.
• This role involves occasional planned on-site visits to build strong relationships and ensure alignment between security architecture and business objectives.

About You

• Extensive experience in information security architecture or design within large, distributed enterprise environments.
• Proficiency with the Microsoft security stack.
• Proven ability to develop security architecture artefacts and reference models, ideally within the manufacturing sector or similar.
• Experience working with external service and technology providers across the lifecycle from horizon scanning to operations.
• Strong interpersonal and communication skills, with the ability to influence and engage stakeholders across technical and non-technical domains.
• Familiarity with cyber security frameworks such as NIST, ISO-27001, ISF SOGP, and ISMS.
• Professional certifications such as CISSP, CCSP, TOGAF, or SABSA (advantageous).
• You bring a collaborative spirit, a proactive approach to risk management, and the ability to translate complex security concepts into actionable insights for diverse audiences.

Benefits

• Competitive salary
• Company bonus
• Pension scheme
• Life assurance
• Income protection
• 25 days holiday plus bank holidays
• Electric Car / Bike to Work schemes

To fulfil our purpose of redefining packaging for a changing world, we aim to build a diverse, motivated, and engaged workforce. Our goal is to create a culture of inclusion where everyone is treated fairly, differences are valued, and everyone has an equal opportunity to succeed.

Our people come from diverse backgrounds, bring different perspectives, ideas, and experiences to generate unique solutions focused on present and future sustainability challenges. We welcome all candidates to apply, even those not meeting all criteria.