IT Security Architect

ARC IT Recruitment; Greater London; Hybrid; GBP 90,000 - 135,000; Full time

Job summary

London-based financial services firm is seeking an IT Security Architect to join a lean, fast-moving team in a hybrid role (London). You will shape security architecture, conduct end-to-end design reviews, and drive threat modelling across projects.

The role requires close collaboration with engineers, deep cloud knowledge (Azure/Microsoft), and a strong IAM background in a regulated FS environment. You will write security standards and contribute to a growing AI security agenda.

Qualifications

• Currently working as a Security Architect, not transitioning from SecOps or engineering.
• Strong Azure and Microsoft cloud knowledge, including identity, networking, and workload protection
• Solid IAM background covering federation, SSO, MFA, and privileged access
• Experience in a regulated environment, either financial services or consultancy with FS clients
• Proven threat modelling and security design review experience, with the ability to write clear security standards

Responsibilities

• Conduct security design reviews end to end
• Perform threat modelling
• Author security standards and patterns
• Provide architecture consultancy to project teams across the business
• Build deep knowledge of a specific business division while remaining part of a central, shared team
• Talk with engineers to shape solutions, not just review them

Skills

Security architecture

Azure Cloud

IAM

FS experience

Threat modelling

Security standards

Job description

IT Security Architect, Financial Services
London, City (Hybrid)
Highly competitive salary with bonus and FS benefits

A leading global financial services firm is building out its security architecture function and looking for a strong Security Architect to join a lean, fast-moving team at a genuinely interesting moment. The firm is mid-transformation: cloud migration, a Zero Trust programme, and a growing AI security agenda. There is real work to do, and real scope to shape how security architecture is delivered across the business.

The role

You will conduct security design reviews end to end, perform threat modelling, author security standards and patterns, and provide architecture consultancy to project teams across the business. You will build deep knowledge of a specific business division while remaining part of a central, shared team. This is not a governance role. You will need to know your technology well enough to have real conversations with engineers and shape solutions, not just review them.

What they are looking for

The ideal profile sits between pure theorist and hands-on practitioner. Close to technology, technically credible, and operating confidently at architecture level.

Core requirements:

• Currently working as a Security Architect, not transitioning from SecOps or engineering
• Strong Azure and Microsoft cloud knowledge, including identity, networking, and workload protection
• Solid IAM background covering federation, SSO, MFA, and privileged access
• Experience in a regulated environment, either financial services or consultancy with FS clients
• Proven threat modelling and security design review experience, with the ability to write clear security standards

Strong differentiators:

• Awareness of AI and LLM security risks (a live priority here, not a futureone)
• Network segmentation, Zero Trust, and SASE/SSE experience, SABSA certification

The environment

This firm moves fast. If you are used to a large architecture team where everyone owns a small slice of a long process, this probably is not the right fit. If you want breadth, real ownership, and the chance to build something properly, it is worth a conversation.