Lead Security Architect

Government Recruitment; City Of London; On-site; GBP 80,000 - 100,000; Full time

Job summary

A public sector organization in London seeks a Lead Security Architect to ensure compliance with security standards across a large portfolio. You will analyze threats and produce tailored reference patterns for security measures. The ideal candidate will have proven experience in risk assessment and a strong understanding of agile security practices. This role offers the opportunity to influence future standards and secure resilient services.

Qualifications

• Experience securing architecture across large portfolios.
• Ability to analyse threats and provide mitigations.
• Understanding of frameworks like ISO27005 and NIST.

Responsibilities

• Secure architecture conforming to Home Office standards.
• Produce reference patterns for security.
• Nurture architects and engineers through coaching.

Skills

Security architecture

Risk assessment

Agile pipeline security

Coaching and mentoring

Job description

Overview

As a Lead Security Architect, you will directly secure architecture across a portfolio worth hundreds of millions of pounds. Working with product owners, delivery managers and enterprise architects, you will ensure every new or changed service conforms to Home Office and NCSC standards while enabling rapid, user-centred delivery.

Responsibilities

• You will analyse emerging threats, advise on proportional mitigations, and produce or tailor reference patterns covering identity, network segmentation, container security, data protection, and monitoring.
• By modelling risks with frameworks such as ISO27005, NIST, or STRIDE, you will rationalise design choices to technical and non-technical audiences and document them for reuse.
• You will champion “secure by default” in agile pipelines embedding IaC scanning, SAST/DAST, SBOM and cloud native guardrails so security becomes a quality attribute owned by delivery teams.
• Through communities of practice and one-to-one coaching, you will nurture architects and engineers, acting as escalation point for complex design decisions.
• Finally, you will cultivate relationships with external suppliers, government peers and industry forums to import good practice and influence future standards, ensuring Home Office services remain resilient, cost-effective and compliant.