Principal Security Architect - Applications and Data

CO-OP; Manchester; Hybrid; GBP 80,000 - 90,000; Full time

Benefits offered by this job

Private healthcare

Company car or car allowance

Annual bonus

Pension with employer contributions

Hybrid working (Manchester HQ)

Gym access and employee discounts

Job summary

Co-op is seeking a Principal Security Architect to lead our applications and data security architecture. You will set standards, govern security across platforms, and provide strategic direction to ensure secure-by-design principles are embedded from cloud platforms to data services.

You will drive threat modelling, security patterns and governance across the wider business, collaborating with architects, engineers and senior colleagues to deliver secure, scalable technology outcomes.

Qualifications

• Leads application and data security architecture across platforms.
• Performs threat modelling and risk-based decision making.
• Applies secure-by-design principles across cloud, APIs, and data services.
• Influences senior partners and ensures governance and compliance.

Responsibilities

• Lead security architecture standards, principles and best practices (NIST, CIS, Zero Trust).
• Embed secure-by-design across apps, APIs, cloud solutions and data services.

Skills

Security architecture

Threat modelling

Cloud-native architecture

DevSecOps

Tools

Kubernetes

Azure

AWS

Job description

We're looking for a Principal Security Architect to join our Technology team and provide expert leadership and oversight around our applications and data security architecture. In this role, you'll help ensure security is designed into our products, platforms, applications and data services from the outset, providing strategic direction, governance and assurance across some of our Co-op's most important technology. As we continue to evolve our technology landscape at Co-op, it's vital that we protect critical applications, services, and data across our business. By embedding secure‑by‑design principles into everything from cloud platforms and APIs to customer data and digital products, you'll help reduce risk and make sure we're delivering technology in the right way.

• Lead our application and data security architecture, setting standards, principles, and best practices as per Industry Frameworks (NIST, CIS and Zero Trust)
• Make sure secure‑by‑design approaches are embedded into applications, platforms, APIs, cloud solutions, and data services using the Shift left methodology
• Provide expert security guidance and assurance across the wider business
• Lead threat modelling activities and support informed decision‑making around security risks, controls, and trade offs
• Define and maintain security patterns covering areas such as secure development, data protection, access management, cryptography, and API security
• Contribute to architecture governance, audits, and regulatory reviews
• Collaborate with architects, engineers, and senior colleagues to drive secure, resilient, and scalable technology outcomes across Co‑op
• Strong experience in cloud‑native architecture, including API integration, microservices, Kubernetes, and secure software development across Azure and/or AWS
• Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes
• Experience working across enterprise and solution architecture, with strong knowledge of application security, data security, and modern engineering practices
• Experience securing enterprise applications such as SAP, Salesforce, or Dynamics, and large‑scale data platforms such as Data Lake, S3, or Databricks
• Knowledge of data loss prevention, data lifecycle management, and relevant regulations such as GDPR
• The ability to influence senior partners and provide clear technical leadership
• £80,000 to £90,000 plus great benefits including private healthcare and a company car or car allowance (Work Level 4)

Manchester city centre - in this role you'll split your time between home and the office twice per month (find out more about our hybrid working policy at https://jobs.coop.co.uk/hybrid-working-policy)

We're open to applications from people who may require flexible working arrangements. There'll be an opportunity to discuss your flexible working requirements during the interview process, and at offer stage. We're reshaping our Digital, Technology and Data function for the future, creating new opportunities, strengthening our capability, and building clearer, more resilient ways of working so we can deliver even better services for our Co‑op, our colleagues, members and customers.

At Co-op, we're owned by our members. And because we're owned by you, we can do right by you. So when you join us, you're not just taking a job, you're joining a movement. We're an organisation that puts people and communities first, and we're powered by purpose. We want this to be a place where you can thrive, so you'll also receive:

• An annual bonus (based on personal and business performance)
• 28 days holiday (rising to 32 with service) plus bank holidays
• A pension with up to 10% employer contributions
• A company car or £6,000 car allowance
• Private healthcare
• Access to a subsidised onsite gym (at our Manchester HQ)
• 30% discount on Co‑op products and 10% off other brands
• Stream - early access to a percentage of your pay as you earn it
• Virtual healthcare including GP appointments, mental health support, nutrition and fitness advice
• 24/7 colleague support service
• Training and support for your development and career progression
• Cycle‑to‑work scheme