Principal Security Architect - Threat Modelling & Secure Design - Banking

Rothstein Recruitment; Greater London; Presencial; GBP 120.000 - 150.000; Jornada completa

Descripción de la vacante

Rothstein Recruitment is seeking a Principal Security Architect to lead threat modelling and secure design for a London-based international bank. You will guide engineers, architects, security consultants, and product teams, shaping secure solutions from early design through delivery.

The role requires deep information security expertise, strong communication, and a collaborative approach across multiple projects.

Formación

• Extensive experience across information security disciplines and complex tech environments.
• Significant experience facilitating threat modelling and identifying mitigations.
• Experience collaborating with architects and engineers on secure designs across cloud, app, infra, and data environments.
• Able to balance security requirements with business and delivery objectives.
• Strong communication skills to explain complex security concepts to diverse audiences.
• Experience coaching and sharing knowledge to raise security capability.
• Comfort operating across multiple projects and rapidly learning new tech domains.
• Collaborative mindset working with engineering, architecture, product and delivery teams.
• Solid understanding of information security risk management in regulated financial services.

Responsabilidades

• Provide senior technical leadership for embedded security consulting across change portfolios.
• Lead threat modelling activities across projects and programmes, guiding mitigations and secure design.
• Develop and share reusable security frameworks, approaches, and guidance materials.
• Solve complex information security challenges across applications, cloud, IAM, and data protection.
• Maintain deep knowledge of information security domains and evolving threats; contribute to strategic security initiatives.

Conocimientos

Threat modelling

Secure design

Information security

Leadership

Communication

Coaching/mentoring

Cloud security

Regulatory risk awareness

Descripción del empleo

Principal Security Architect - Threat Modelling & Secure Design - Banking

Excellent opportunity opens to join a London-based International Bank as their new Principal Security Architect. As a senior technical leader, you will drive the strengthening of secure design and threat modelling practises, and be a key source of expertise for engineers, architects, security consultants, and product teams.

Key responsibilities

• Technical Leadership - You will act as a senior technical specialist for the embedded security consulting function, providing guidance and expertise on complex security challenges across the change portfolio. You will help consultants and delivery teams navigate technically challenging situations and support the development of pragmatic security solutions.
• Threat Modelling - You will support and facilitate threat modelling activities across a diverse portfolio of projects and programmes. You will help consultants and technology teams identify threats, understand attack scenarios, evaluate mitigating controls, and incorporate security thinking into solution design from the earliest stages of delivery.
• Capability Building - You will help develop the technical capability of the embedded security consulting community through coaching, mentoring, knowledge sharing, and the creation of reusable approaches, frameworks, and guidance materials. You will champion security best practices and help elevate technical security expertise across the team.
• Problem Solving - You will support consultants and delivery teams in addressing complex information security challenges. This may include application security concerns, cloud security considerations, identity and access management issues, data protection requirements, emerging technologies, and technical risk mitigation strategies.
• Subject Matter Expertise - You will maintain deep knowledge across relevant information security domains, industry standards, emerging threats, and security technologies. You will contribute specialist expertise to strategic initiatives, help shape approaches to threat modelling and secure design, and support the continual evolution of the bank's security capability.

What we’re looking for

• Extensive experience in one or more information security disciplines and a strong understanding of how security principles are applied within complex technology environments.
• Significant experience facilitating threat modelling activities and helping teams identify practical mitigations to security threats.
• Experience working with architects and engineers to develop secure technical designs across cloud, application, infrastructure, and data environments
• You enjoy solving difficult technical problems and can balance security requirements with business and delivery objectives.
• A strong communicator, able to explain complex security concepts to both technical and non-technical audiences.
• You enjoy coaching, mentoring, and sharing knowledge with colleagues to help build capability across a wider community of security consultants.
• You are comfortable operating across multiple projects simultaneously and can rapidly understand new technologies, architectures, and business domains.
• You have a collaborative mindset and enjoy working alongside engineering, architecture, product, and delivery teams to achieve shared outcomes.
• You have a strong understanding of information security risk management and how security risks are identified, articulated, and managed within a regulated financial services environment.
• You are aware of your own knowledge gaps and proactively seek specialist input when required.
• You are passionate about helping technology teams deliver secure solutions and embedding security considerations early in the design and delivery lifecycle.

Information Security Application Security Network Security Cloud Security Infrastructure Security Threat Modelling Privacy InfoSecArch InfoSec Architect Information Security Architect Information Security Consultant Information Security Lead Solution Architect Solution Architecture Bank Banking Finance Financial Services Change Modernisation CISSP Technology Change Regulatory Requirements Risk Management