Security Architect

Maxwell Bond; Greater London; On-site; GBP 75,000 - 95,000; Full time

Job summary

A leading security consultancy is seeking a Security Architect to design and implement robust security frameworks. The role involves leading Azure security architecture for enterprise clients, conducting assessments, and collaborating with various stakeholders to ensure security practices align with business objectives and regulatory requirements. The ideal candidate has a strong Azure background, knowledge of security frameworks, and excellent communication skills.

Qualifications

• Strong background in Azure security engineering/architecture, ideally in a consulting role.
• Practical knowledge of cloud security frameworks such as CAF, Well-Architected, CIS, NIST.
• Hands-on experience securing and operating Azure solutions.

Responsibilities

• Lead design and delivery of Azure security architectures for enterprise customers.
• Conduct security assessments throughout project lifecycle.
• Collaborate with stakeholders to ensure security practices are aligned.

Skills

Azure security engineering/architecture

Cloud security frameworks knowledge

Communication with technical teams

Risk assessment and threat modelling

Hands-on experience with Azure

Education

Industry certifications (e.g. SC‑100, AZ‑500)

Job description

Job Summary

The Security Architect plays a critical role in designing, implementing, and maintaining robust security frameworks and solutions within our professional services business. This role ensures that all projects and services adhere to the highest security standards, effectively balancing business objectives with risk mitigation strategies. The Security Architect will collaborate with stakeholders across the organisation to define security requirements, advise on best practices, and support leadership in managing security-related challenges, compliance requirements, and emerging threats.

What You’ll Be Doing

• Leading the design and delivery of Azure security architectures for enterprise customers.
• Translating requirements, leading impact assessments, generating actionable mitigations and advising on implementation.

What You’ll Bring

• Strong background in Azure security engineering/architecture, ideally in a consulting or professional services capacity.
• Practical knowledge of cloud security frameworks such as CAF, Well-Architected, CIS, NIST etc.
• Hands‑on experience securing and operating solutions deployed to Azure.
• Confident communicator with the ability to engage technical teams and senior stakeholders alike.
• Industry certifications (e.g. SC‑100, AZ‑500, SC‑300, SC‑401) would be highly beneficial.

Key Responsibilities

Domain Knowledge

• Expertise in designing, implementing, and maintaining secure architectures, with a deep understanding of industry‑standard frameworks such as ISO 27001, NIST, and CIS Controls.
• Knowledge of threat modelling, risk assessments, and mitigation strategies tailored to various technical and business environments.
• Stay updated on emerging security threats, technologies, and regulatory requirements, ensuring proactive risk management.

Security Architecture Vision

• Develop and communicate a clear vision for security architecture that aligns with organisational goals and industry standards.
• Continuously refine the vision to address evolving threats, business objectives, and regulatory changes.

Project Delivery

• Work with delivery managers and project teams to ensure security requirements are identified, scoped, and integrated into project plans.
• Conduct security assessments throughout the project lifecycle, from design to implementation, to validate alignment with security objectives.

Stakeholder Management

• Collaborate with internal and external stakeholders, including business leaders, clients, auditors, and regulators, to ensure alignment of security practices.
• Act as the primary escalation point for critical security issues and incidents.

Documentation

• Lead the creation and maintenance of comprehensive security documentation, including impact assessments, mitigations, and architectural diagrams.
• Ensure clarity and accessibility of security documentation for technical and non-technical audiences.