Principal Enterprise Security Architect

NPL; Tewkesbury; On-site; GBP 80,000 - 110,000; Full time

Job summary

A UK-based research organization is looking for a Principal Enterprise Security Architect to lead cyber security design for national-scale Position, Navigation, and Timing programmes. The successful candidate will manage cyber security architecture, collaborate with stakeholders, and ensure compliance with NPL's security strategy. Extensive expertise in enterprise security frameworks, cloud technologies, and risk management is required. This role is crucial in developing security solutions and engaging with government and private sector stakeholders.

Qualifications

• Expertise in enterprise security architecture frameworks.
• Proven experience with cloud and IT technologies.
• Relevant certifications such as CISSP or CISM.

Responsibilities

• Lead cyber security design and assurance for national-scale programmes.
• Collaborate with senior stakeholders to align with NPL’s security strategy.
• Oversee implementation of security solutions to meet enterprise roadmap.

Skills

Enterprise security architecture frameworks

Cloud technologies

IT technologies

Risk mitigation

CISSP certification

CISM certification

Job description

Social network you want to login/join with:

Principal Enterprise Security Architect, Tewkesbury

Client:

NPL

Location:

Tewkesbury, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

Job Reference:

5a62313179de

Job Views:

6

Posted:

12.08.2025

Expiry Date:

26.09.2025

Job Description:

The National Physical Laboratory (NPL) is seeking a Principal Enterprise Security Architect to lead cyber security design and assurance for national-scale Position, Navigation, and Timing (PNT) programmes. The role requires expertise in enterprise security architecture frameworks, cloud and IT technologies, risk mitigation, and relevant certifications such as CISSP or CISM. The successful candidate will collaborate with senior stakeholders and ensure alignment with NPL’s security strategy and compliance with government and industry standards.

This role will be responsible for the overall cyber security design, development, and delivery across strategic PNT programmes. It involves delivering assurance on activities of high complexity and risk, enabling NPL to achieve its goals within its risk appetite.

The Principal Enterprise Security Architect will lead the Cyber Security pillar within the PNT Technical Design Authority, overseeing the implementation of solutions to ensure technology and digital solutions align with the enterprise security roadmap.

This position reports to the head of NPL’s Cyber Security Team, part of the NPL CIO function. It involves providing day-to-day information risk consultancy, advice, guidance, prioritising risk mitigation activities, tracking risk tolerance, and supporting the design and implementation of the assurance framework.

Key Responsibilities:

• Lead the cyber security architecture and design function across NPL’s PNT programmes to deliver at national scale.
• Develop an enterprise architecture and guiding principles for the PNT programmes aligning with NPL’s security strategy.
• Communicate with senior stakeholders across NPL and UK Government, defining the vision, principles, and strategy for security architecture.
• Work with the Enterprise Architecture team to provide a consolidated architectural position to guide NPL in the safe use of IT technologies and systems.
• Lead the technical cyber security design of systems and services across multiple PNT programmes and projects.
• Make and influence important business and architectural decisions.
• Research, identify, validate, and adopt new security technologies and methodologies to help NPL achieve its objectives.
• Research and apply innovative security architecture solutions, justifying and communicating design decisions.
• Engage with NPL’s customers within the UK Government and private sector on security risk and architectural decisions.
• Balance requirements and decide between approaches based on business needs and risk appetite.
• Identify and communicate current and emerging threats, designing security architecture to mitigate these threats.
• Develop a security posture that delivers mitigation through technical implementation, operating procedures, and business processes.