Security Architect

Pontoon; Plymouth; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A leading consultancy in energy is seeking an experienced IT Security Architect to support digital and cloud transformation projects. In this role, you will define security architecture for critical projects and ensure compliance with security standards. Required qualifications include 7+ years in cyber security and in-depth knowledge of cloud platforms. The position offers flexible hybrid working arrangements based in Plymouth or Exeter.

Benefits

Flexible hybrid working arrangements

Opportunity to shape cyber strategy

Work in a values-led organisation

Qualifications

• 7+ years of relevant experience in cyber security.
• Experience with frameworks like NIST CSF and Cyber Assessment Framework.
• Ability to collaborate with globally distributed teams.

Responsibilities

• Define and own security architecture for key IT projects.
• Provide security expertise to delivery and engineering teams.
• Conduct cyber risk assessments and supplier contract reviews.

Skills

Cyber security expertise

Knowledge of AWS

Knowledge of Microsoft Azure

Communication skills

Stakeholder influence

Education

Degree in a relevant field or equivalent practical experience

Job description

Overview

Job Title: IT Security Architect
Contract: Contract role
Location: Hybrid - Based in Plymouth or Exeter
Sector: Energy & Utilities

About the Role

We're working with a leading organisation at the heart of the UK's energy transition-powering the move toward a cleaner, greener future. They're currently seeking an experienced IT Security Architect to support a portfolio of critical digital and cloud transformation projects.

This is a hybrid contract role with on-site presence expected in Plymouth or Exeter. You'll play a key part in ensuring security is embedded across IT platforms, helping to safeguard systems that are essential to the UK's energy infrastructure.

Responsibilities

• Define and own security architecture for key IT projects across cloud and on-premises environments.
• Provide security expertise and direction to delivery and engineering teams.
• Drive secure-by-design principles and ensure compliance with internal and industry security standards.
• Conduct 1st-line cyber risk assessments and supply chain assurance for third-party vendors.
• Review supplier contracts to ensure appropriate security clauses are embedded.
• Maintain clear documentation and reporting around risks, residual risk ownership, and audit readiness.
• Stay up to date with the evolving cyber threat landscape and implement appropriate security controls.

Qualifications

• Strong background in cyber security, with 7+ years of relevant experience.
• In-depth knowledge of cloud platforms such as AWS and Microsoft Azure, as well as Microsoft Entra ID and M365.
• Familiarity with frameworks such as NIST CSF, Cyber Assessment Framework (CAF), and NCSC Cloud Security Principles.
• Proven ability to influence stakeholders and support secure delivery in large, complex environments.
• Excellent communication skills and ability to collaborate with globally distributed teams.
• A degree in a relevant field, or equivalent practical experience.

Why This Role?

• Join a programme of work central to the UK's energy future.
• Shape cyber strategy and architecture across high-impact digital and cloud initiatives.
• Flexible hybrid working arrangements - based on either Plymouth or Exeter.
• A chance to work in a values-led, forward-thinking organisation focused on real-world impact.

Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you