Security Architect

AXA; United Kingdom; Remote; GBP 90,000 - 130,000; Full time

Job summary

AXA UK is seeking a Security Architect to lead the security architecture across infrastructure, cloud, networks, platforms and identity services. You will provide strategic and technical leadership to embed security into design, delivery and operation of technology services.

The role requires broad cyber security knowledge, strong infrastructure and cloud architecture experience, and risk-aware judgement balancing security with business needs.

Qualifications

• Significant experience in cyber security and security architecture.
• Experience across on-prem, cloud, SaaS, and hybrid estates.
• Ability to lead security reviews and risk assessments.

Responsibilities

• Define and communicate target security architecture and roadmaps.
• Embed security from design through operation of technology.
• Work with Infrastructure and Cloud teams to embed controls.
• Govern network security controls including segmentation and firewalls.
• Oversee IAM authentication, authorization, and access control.
• Review designs for compliance with policies and architecture.

Skills

Cyber security

Security architecture

Infrastructure architecture

Cloud security

Azure/AWS/GCP

Security strategy

Risk assessment

Threat modelling

Team leadership

Job description

About AXA

AXA is a global leader in insurance and financial services, dedicated to helping customers protect what matters most to them. As the sixth-largest insurance company in the world, we provide a wide range of services, including health, car, home, and business insurance. We support millions of customers worldwide, helping them navigate life's uncertainties with confidence.

AXA UK Support Functions look after our three customer-facing business units, providing the infrastructure and expertise to make sure we can be there for our customers.

Job overview

We have a new opportunity for a Security Architect to join us within our Infrastructure Architecture team. You'll be responsible for defining, governing and evolving the organisation's security architecture across infrastructure, cloud, networks, platforms, endpoints, applications and identity services. This role provides strategic and technical leadership to ensure security is embedded into the design, delivery and operation of technology services.

We're looking for someone with broad cyber security knowledge, strong infrastructure and cloud architecture experience, sound commercial and risk judgement and the ability to balance security, resilience, regulatory obligations, operational efficiency and business needs.

Key responsibilities

• Define, maintain and communicate the organisation's security architecture, target state, roadmap, standards, principles and technical control requirements
• Ensure security is considered from the earliest stages of technology design, procurement, implementation, change and operational transition
• Work with Infrastructure and Cloud teams to ensure security controls are embedded into platform design, build standards, configuration baselines, patching and operational processes
• Support the design and governance of network security controls, including network segmentation, firewalls, secure connectivity, remote access, web gateways, DNS security and network monitoring
• Provide architectural governance for identity and access management capabilities, ensuring authentication, authorisation and access-control services are secure, scalable, auditable and aligned with business requirements
• Review and assure security designs, architecture proposals, technology solutions and significant changes to ensure compliance with security policies, standards and approved architecture patterns
• Lead or contribute to root-cause analysis following security incidents or material operational events, ensuring that lessons learned are incorporated into standards, architecture patterns and roadmaps

Work arrangements

At AXA we work smart, this role is non-office based meaning you can predominantly work from home or if in a field-based role, you'll travel to visit offices or client sites as required. We're also happy to consider flexible working arrangements, which you can discuss with Talent Acquisition.

Your skills & experience

• Significant experience in cyber security, security architecture, infrastructure architecture or a related senior technical security discipline
• Ability to design, govern and assure security controls across on-premises infrastructure, cloud services, SaaS platforms and hybrid technology estates
• Cloud security principles and controls, ideally across Microsoft Azure, AWS and/or GCP
• Expertise defining security architecture strategies, target architectures, roadmaps, standards, principles and technical control requirements
• Competence leading security architecture reviews, technical risk assessments, threat modelling and design assurance activities
• Proficiency contributing to large-scale transformation programmes, cloud adoption, infrastructure modernisation, application migration or major technology change
• Ability to lead, mentor or develop technical teams, colleagues or delivery partners

#LI-Hybrid