Principal Security Engineer - Lead Security Architecture

Yorkshire Building Society; Bradford; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Holiday 25 days

7% on-target bonus (up to 15%)

Pension up to 11%

Private medical insurance

My Benefits portal

Job summary

Yorkshire Building Society is seeking a Principal Cyber Security Engineer to act as a senior technical authority, guiding security engineering and secure-by-design practices across the organisation. The role is hybrid with travel to Leeds and Bradford Head Offices.

You will partner with architecture and change teams, translate complex risks into business decisions, and lead threat, vulnerability and identity security initiatives while providing expert leadership and influencing stakeholders.

Qualifications

• Strong experience in cyber security engineering, including modern tooling, complex infrastructure, and secure design principles.
• Proven ability to bridge technical, risk, and business perspectives, translating security requirements into effective solutions.
• Experience in threat identification, vulnerability management, and identity & access management, with strong communication and consultancy skills.
• Ability to work collaboratively with cross-functional teams such as architecture, change, and technology services to deliver secure outcomes.
• Relevant cyber security qualifications (e.g. CISSP, CISM, CRISC or equivalent) and commitment to ongoing professional development.

Responsibilities

• Drive consistent, high-quality security engineering practices, improving capability and alignment across security, threat & vulnerability, and assurance teams.
• Translate complex technical risks into clear, business-aligned decisions, supporting change and transformation initiatives.
• Strengthen organisational resilience through enhanced oversight of critical technologies (including identity platforms) and evolving threat response.
• Provide expert technical leadership and act as an escalation point for complex cyber security challenges across the organisation.
• Ensure security requirements are clearly defined, translated, and embedded into change and transformation activities.

Skills

Cyber security engineering

Threat & vulnerability management

Identity & access management

Stakeholder communication

Security governance

Change collaboration

Education

CISSP / CISM / CRISC or equivalent

Job description

Yorkshire Building Society is seeking a Principal Cyber Security Engineer to act as a senior technical authority, guiding security engineering and secure-by-design practices across the organisation. The role is hybrid with travel to Leeds and Bradford Head Offices.

You will partner with architecture and change teams, translate complex risks into business decisions, and lead threat, vulnerability and identity security initiatives while providing expert leadership and influencing stakeholders.