Lead Security Architect

Phoenix It Consultancy Limited; South Yorkshire; On-site; GBP 110,000 - 150,000; Full time

Job summary

Phoenix IT Consultancy Limited in the United Kingdom seeks a Lead Security Architect to define and oversee security architecture across applications, networks and information systems. You will drive secure design, threat modelling and security controls, partnering with engineering, operations and leadership to embed security across project lifecycles.

The ideal candidate brings deep expertise in enterprise security frameworks, cloud security, risk management and incident response, with a track

Qualifications

• Proven expertise in security architecture design and enterprise frameworks.
• Ability to communicate complex security concepts to senior stakeholders.
• Hands-on experience in application security, threat modelling and SDLC integration.
• Strong knowledge of risk, vulnerability management, and incident response support.
• Experience with cloud security and securing cloud-based services.
• Familiarity with UK public sector standards (Gov Assure, NCSC).

Responsibilities

• Define and oversee the client’s security architecture across applications, networks, and information systems.
• Conduct security reviews and threat modelling to identify gaps and risk.
• Guide the implementation of security controls and standards across projects.
• Mentor and direct security and technical teams.
• Collaborate with engineering, operations and leadership to embed security in lifecycles.

Skills

Security architecture

Stakeholder communication

Threat modelling

DevSecOps

Risk management

Cloud security

Information security

ISO 27001/NIST

Public sector experience

Mentoring

Education

Bachelor’s degree in Computer Science/Information Security

CISSP

CISM

CCSP

SABSA

Job description

Company Description

Phoenix IT Consultancy Limited is an Information Technology and Cyber Professional Services company based in Yorkshire, serving a range of public and private sector clients. The organization focuses on delivering secure, resilient technology solutions and expert cybersecurity advisory services. Team members work closely with customers to understand complex technical and regulatory requirements and translate them into practical solutions. The company values innovation, professionalism, and continuous learning, offering opportunities to work with modern technologies and evolving security frameworks.

Role Description

The Lead Security Architect position is a full-time role responsible for defining and overseeing the our clients security architecture across applications, networks, and information systems. Day-to-day work includes designing secure system and solution architectures, conducting security reviews and threat modelling, and guiding the implementation of security controls and standards. The role collaborates with engineering, operations, and leadership teams to ensure security is integrated into project lifecycles, from design through deployment and maintenance. The Lead Security Architect will evaluate new technologies, perform risk assessments, support incident response with architectural expertise, and provide mentoring and direction to other security and technical professionals.

Qualifications

• Strong expertise in Security Architecture Design, including enterprise security frameworks, secure design patterns, and alignment with industry standards and regulations.
• Proven ability to communicate complex security concepts to technical and non-technical stakeholders Including senior business leaders) and to influence architectural decisions.
• Hands-on experience in Application Security, such as secure coding practices, code and design review, threat modelling, and integrating security into SDLC and DevSecOps pipelines.
• Deep knowledge of Cybersecurity principles, including risk management, vulnerability management, security operations, and incident response support.
• Proven experience in Securing Cloud based Services and Technologies.
• Solid background in Information Security, including data protection, identity and access management, governance, policies, and compliance with relevant standards (e.g., ISO 27001, NIST).
• Experience in working within the UK public sector and familiar with Secure By Design, Gov Assure and NCSC standards and guidance.
• Relevant certifications such as CISSP, CISM, SABSA, CCSP
• Experience leading or mentoring technical teams and working in multi-disciplinary project environments.
• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.