Principal Security Architect - Applications & Data

The Co-Operative Group; Manchester; Hybrid; GBP 51,000 - 91,000; Full time

Benefits offered by this job

Private healthcare

Company car / car allowance

Annual bonus

28 days holiday

Pension with employer contributions

Onsite gym access

Cycle-to-work scheme

Colleague discounts

Virtual healthcare

Training and development support

Job summary

The Co-Operative Group in Manchester is seeking a Principal Security Architect to lead application and data security across our technology landscape. You will set standards, drive secure-by-design practices, and align with industry frameworks to protect enterprise systems.

You will collaborate with architects and engineers, perform threat modelling, and shape security patterns for cryptography, access control, and API security.

Qualifications

• Strong experience in cloud-native architecture, API integration, microservices, Kubernetes, and secure software development across Azure and/or AWS.
• Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes.

Responsibilities

• Lead our application and data security architecture, setting standards, principles, and best practices as per industry frameworks such as NIST, CIS, and Zero Trust.
• Make sure secure-by-design approaches are embedded into applications, platforms, APIs, cloud solutions, and data services using the shift-left methodology.
• Provide expert security guidance and assurance across the wider business.
• Lead threat modelling activities and support informed decision-making around security risks, controls, and trade-offs.
• Define and maintain security patterns covering areas such as secure development, data protection, access management, cryptography, and API security.
• Contribute to architecture governance, audits, and regulatory reviews.
• Collaborate with architects, engineers, and senior colleagues to drive secure, resilient, and scalable technology outcomes across our business

Skills

Cloud-native architecture

API integration

Microservices

Kubernetes

Secure software development

Azure

AWS

Security frameworks

Enterprise architecture

Data security

SAP

Salesforce

Dynamics

GDPR

Influence senior partners

Tools

SAP

Salesforce

Dynamics

Databricks

S3

Job description

Salary: £51,000 - 91,000 per year

Requirements:

• Strong experience in cloud-native architecture, including API integration, microservices, Kubernetes, and secure software development across Azure and/or AWS
• Good knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, OWASP, and how to apply security controls in DevOps platforms and processes
• Experience working across enterprise and solution architecture, with strong knowledge of application security, data security, and modern engineering practices
• Experience securing enterprise applications such as SAP, Salesforce, or Dynamics, and large-scale data platforms such as Data Lake, S3, or Databricks
• Knowledge of data loss prevention, data lifecycle management, and relevant regulations such as GDPR
• The ability to influence senior partners and provide clear technical leadership

Responsibilities:

• Lead our application and data security architecture, setting standards, principles, and best practices as per industry frameworks such as NIST, CIS, and Zero Trust
• Make sure secure-by-design approaches are embedded into applications, platforms, APIs, cloud solutions, and data services using the shift-left methodology
• Provide expert security guidance and assurance across the wider business
• Lead threat modelling activities and support informed decision-making around security risks, controls, and trade-offs
• Define and maintain security patterns covering areas such as secure development, data protection, access management, cryptography, and API security
• Contribute to architecture governance, audits, and regulatory reviews
• Collaborate with architects, engineers, and senior colleagues to drive secure, resilient, and scalable technology outcomes across our business

Technologies:

• API
• AWS
• Architect
• Azure
• Cloud
• Cryptography
• Databricks
• DevOps
• Embedded
• Support
• Kubernetes
• OWASP
• SAP
• Salesforce
• Security
• microservices

More:

We are reshaping our Digital, Technology and Data function for the future, creating new opportunities, strengthening our capability, and building clearer, more resilient ways of working so we can deliver even better services for our Co-op, our colleagues, members and customers. This Principal Security Architect role sits within our Technology team in Manchester city centre, with hybrid working between home and the office twice per month. We offer great benefits including private healthcare, a company car or car allowance, an annual bonus, 28 days holiday rising to 32 with service plus bank holidays, a pension with up to 10% employer contributions, onsite gym access at our Manchester HQ, colleague discounts, virtual healthcare, training and support for development, and a cycle-to-work scheme. We are an inclusive employer, welcome applications from everyone, and make reasonable adjustments to support candidates through the recruitment process.

last updated 37 week of 2026