Lead Security Architect: Applications & Data (Hybrid)

Career Choices Dewis Gyrfa Ltd; Manchester; Hybrid; GBP 80,000 - 90,000; Full time

Benefits offered by this job

Annual bonus

28 days holiday (rising to 32)

Pension with 10% employer contribs

Company car or car allowance

Private healthcare

Onsite gym

Discount on Co-op products

Job summary

Co-op Group is seeking a Principal Security Architect to lead applications and data security across our technology landscape in Manchester. You will shape secure-by-design practices, drive governance and enable resilient, scalable outcomes across cloud, APIs and data services.

The role emphasizes security leadership, collaboration with engineers and senior partners, and flexible working arrangements within a hybrid model.

Qualifications

• Strong experience in cloud-native architecture, including API integration, microservices, and Kubernetes.
• Secure software development across Azure and/or AWS.
• Knowledge of security frameworks and standards: NIST CSF, MITRE ATT&CK, OWASP.
• Experience securing enterprise apps (SAP, Salesforce, Dynamics) and large data platforms (Data Lake, S3, Databricks).

Responsibilities

• Lead our application and data security architecture, setting standards, principles and best practices.
• Provide expert security guidance and governance across the wider business.
• Lead threat modelling activities and support informed risk decisions.
• Define and maintain security patterns for development, data protection, access management, cryptography and API security.
• Contribute to architecture governance, audits and regulatory reviews.

Skills

Cloud-native architecture

API integration

Microservices

Kubernetes

Secure SDLC

Security frameworks

NIST CSF

MITRE ATT&CK

OWASP

SAP/Salesforce/Dynamics security

Data platforms security

Job description

Co-op Group is seeking a Principal Security Architect to lead applications and data security across our technology landscape in Manchester. You will shape secure-by-design practices, drive governance and enable resilient, scalable outcomes across cloud, APIs and data services.

The role emphasizes security leadership, collaboration with engineers and senior partners, and flexible working arrangements within a hybrid model.