Security Architect

AXA UK; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

AXA is seeking a Security Architect to join the Infrastructure Architecture team. You will define, govern and evolve the organisation's security architecture across infrastructure, cloud, networks and identity services, providing strategic leadership to embed security into design, delivery and operations.

The role requires broad cyber security knowledge, strong infrastructure and cloud experience, and the ability to balance security with resilience, regulatory obligations and business needs.

Qualifications

• Significant experience in cyber security, security architecture, infrastructure architecture or a related senior technical security discipline.
• Ability to design, govern and assure security controls across on-premises infrastructure, cloud services, SaaS platforms and hybrid technology estates.
• Cloud security principles across Azure, AWS and/or GCP and ability to define security strategies, target architectures and roadmaps.
• Experience leading security architecture reviews, risk assessments, threat modelling and design assurance activities.

Responsibilities

• Define, maintain and communicate the organisation's security architecture, target state, roadmap, standards and technical control requirements.
• Ensure security is considered from the earliest stages of technology design, procurement, implementation, change and operational transition.
• Collaborate with Infrastructure and Cloud teams to embed security controls into platform design and operational processes.
• Support governance of network security controls including segmentation, firewalls, secure connectivity and monitoring.
• Provide architectural governance for identity and access management ensuring secure, auditable access services.
• Review designs and changes for compliance with security policies and approved architecture patterns.

Skills

Cyber security

Security architecture

Infrastructure architecture

Cloud security

Security governance

Job description

About AXA

AXA is a global leader in insurance and financial services, dedicated to helping customers protect what matters most to them. As the sixth-largest insurance company in the world, we provide a wide range of services, including health, car, home, and business insurance. We support millions of customers worldwide, helping them navigate life's uncertainties with confidence.

AXA UK Support Functions look after our three customer-facing business units, providing the infrastructure and expertise to make sure we can be there for our customers.

Job overview

We have a new opportunity for a Security Architect to join us within our Infrastructure Architecture team. You'll be responsible for defining, governing and evolving the organisation's security architecture across infrastructure, cloud, networks, platforms, endpoints, applications and identity services. This role provides strategic and technical leadership to ensure security is embedded into the design, delivery and operation of technology services.

We're looking for someone with broad cyber security knowledge, strong infrastructure and cloud architecture experience, sound commercial and risk judgement and the ability to balance security, resilience, regulatory obligations, operational efficiency and business needs.

Key responsibilities

• Define, maintain and communicate the organisation's security architecture, target state, roadmap, standards, principles and technical control requirements
• Ensure security is considered from the earliest stages of technology design, procurement, implementation, change and operational transition
• Work with Infrastructure and Cloud teams to ensure security controls are embedded into platform design, build standards, configuration baselines, patching and operational processes
• Support the design and governance of network security controls, including network segmentation, firewalls, secure connectivity, remote access, web gateways, DNS security and network monitoring
• Provide architectural governance for identity and access management capabilities, ensuring authentication, authorisation and access-control services are secure, scalable, auditable and aligned with business requirements
• Review and assure security designs, architecture proposals, technology solutions and significant changes to ensure compliance with security policies, standards and approved architecture patterns
• Lead or contribute to root-cause analysis following security incidents or material operational events, ensuring that lessons learned are incorporated into standards, architecture patterns and roadmaps

Work arrangements

At AXA we work smart, this role is non-office based meaning you can predominantly work from home or if in a field-based role, you'll travel to visit offices or client sites as required. We're also happy to consider flexible working arrangements, which you can discuss with Talent Acquisition.

Your skills & experience

• Significant experience in cyber security, security architecture, infrastructure architecture or a related senior technical security discipline
• Ability to design, govern and assure security controls across on-premises infrastructure, cloud services, SaaS platforms and hybrid technology estates
• Cloud security principles and controls, ideally across Microsoft Azure, AWS and/or GCP
• Expertise defining security architecture strategies, target architectures, roadmaps, standards, principles and technical control requirements
• Competence leading security architecture reviews, technical risk assessments, threat modelling and design assurance activities
• Proficiency contributing to large-scale transformation programmes, cloud adoption, infrastructure modernisation, application migration or major technology change
• Ability to lead, mentor or develop technical teams, colleagues or delivery partners

#LI-Hybrid