Information Security Architect

The Opportunity Hub UK Ltd; West of England; Hybrid; GBP 75,000 - 96,000; Full time

Benefits offered by this job

£74,500–£95,500 salary

Equity/stock options

Hybrid working Bristol

Learning & development budget

Flat structure with direct access to决

Job summary

The Opportunity Hub UK Ltd, Bristol-based, is seeking a Senior Information Security Architect to shape the security architecture roadmap for cloud and on-premises infrastructure. You will work with engineering leads to embed security controls into CI/CD, set identity and encryption standards, and assess vendor security posture before contracts are signed.

In this startup-driven role, you'll drive threat modelling, communicate complex risk to non-technical stakeholders, and make architectural

Qualifications

• Proven track record designing security architecture at scale for products/SaaS.
• Deep working knowledge of cloud security (AWS, Azure or GCP).
• Familiarity with ISO 27001, NIST or SOC 2 and judgement about when frameworks apply.
• Comfort operating with ambiguity in a startup environment.
• Strong communication skills to explain risk to non-technical stakeholders.
• Relevant certifications (CISSP, CISM or similar) are useful but secondary.

Responsibilities

• Design and own the security architecture roadmap across cloud and on-prem infrastructure.
• Lead threat modelling sessions for new products and features before production.
• Embed security controls into CI/CD pipelines rather than as afterthoughts.
• Set standards for identity, access management and encryption across the estate.
• Assess third-party vendors and integrations for security posture before signing contracts.
• Present risk findings and architectural trade-offs to investors and clients.

Skills

Security architecture

Cloud security

Zero trust

Security frameworks

Communication skills

Certifications (CISSP/CISM)

Job description

An exceptional opportunity for a senior Information Security Architect to shape the future of Cybersecurity in Bristol.

Cyber threats have grown sharper and faster than most organisations' defences, and the gap between attacker capability and business preparedness keeps widening. This growing startup, built around cybersecurity products for mid-market and enterprise clients, is scaling its security architecture function to match demand. Bristol has become one of the UK's genuine cybersecurity hubs, sitting close to GCHQ's satellite operations and a dense cluster of defence and tech firms, and this business wants to be part of that story rather than watching from the sidelines. Flat structure, fast decisions, real equity. If you've been waiting for a role where your architectural decisions actually ship instead of sitting in a committee for six months, this is it.

Here's what you'll be doing:

Design and own the security architecture roadmap across cloud and on-prem infrastructure, balancing speed of delivery against risk

Lead threat modelling sessions for new products and features before they reach production

Work directly with engineering leads to embed security controls into CI/CD pipelines rather than bolting them on afterwards

Set standards for identity, access management and encryption across the estate, and hold the line when shortcuts get proposed

Assess third-party vendors and integrations for security posture before contracts get signed

Present risk findings and architectural trade-offs to non-technical stakeholders, including investors and clients

Here are the skills you'll need:

Proven track record designing security architecture at scale, ideally within a product-led or SaaS environment

Deep working knowledge of cloud security (AWS, Azure or GCP), zero trust models and secure network design

Familiarity with relevant frameworks such as ISO 27001, NIST or SOC 2, and the judgement to know when a framework is guidance rather than gospel

Comfort operating with ambiguity. Startups don't hand you a finished playbook

Strong communication skills. You'll need to explain complex risk to people who don't live in this world every day

Relevant certifications (CISSP, CISM or similar) are useful but secondary to demonstrable judgement

Key perks and benefits:

• £74,500 to £95,500, depending on experience
• Equity or stock options, because you're building something with a stake in it
• Hybrid working from Bristol, with flexible hours built around output rather than hours logged
• A genuine learning and development budget for certifications, conferences and courses
• A flat structure where your ideas reach decision-makers directly, not through four layers of management

Why pursue a career in Cybersecurity?

Demand for skilled security architects continues to outstrip supply, and that imbalance isn't closing anytime soon. Bristol's cybersecurity scene has quietly become one of the strongest outside London, with a talent pool and client base that keeps attracting serious investment. Few fields reward sharp thinking and sound judgement as consistently as this one does, and an Information Security Architect who gets it right can genuinely shape how a company survives the next decade.