Security Architect & GRC Lead

LHH; Scotland; On-site; GBP 90,000 - 130,000; Full time

Job summary

LHH is seeking a Security TDA Lead to drive governance, risk, compliance and vulnerability assessment across a complex, multi-technology environment. You will lead security-by-design aligned to ISO 27001, Cyber Essentials Plus and architectural standards.

The role combines GRC operational leadership with cyber technical design to ensure secure architectures and effective risk management across the account. Strong experience in GRC, risk, and security architecture is required.

Qualifications

• Strong GRC and risk management experience.
• Familiarity with ISO27001, GDPR, NIST, and ITIL.
• Experience as Security Architect or TDA.
• Knowledge of Zero Trust and cloud security.
• Ability to work in a secure, restricted-access environment.

Responsibilities

• Security Architecture & Cyber TDA Leadership
• Act as Cyber Technical Design Authority (TDA) for the account
• Review and approve solution architectures
• Define security reference architectures and patterns
• Provide security design sign-off and manage exceptions
• Embed security-by-design in all solutions
• Advise on IDAM, network, cloud and infrastructure security
• Develop and maintain security policies aligned to ISO 27001 and Cyber Essentials Plus
• Manage Security Risk Register, controls, RACI and RBAC model
• Lead risk identification, assessment, treatment and reporting
• Support audits and assurance activities
• Contribute to Disaster Recovery, Business Continuity and security incident management, covering tracking, remediation, RCA, and reporting
• Conduct assurance activities to validate control effectiveness
• Produce regular reporting packs covering risk, compliance, audits, and incidents
• Provide and update relevant Security Training material for account personnel.
• Review and triage vulnerability scans and penetration test reports
• Prioritise vulnerabilities based on risk, impact, and contractual obligations
• Coordinate remediation across technical teams, ensuring clear ownership and timely closure
• Track vulnerabilities to distinguish new vs. existing issues
• Provide remediation guidance and consultancy to stakeholders
• Deliver reporting on remediation progress for internal and client consumption

Skills

GRC

Risk management

ISO27001

GDPR

NIST

ITIL

Security Architecture

TDA

Zero Trust

Cloud security

Job description

LHH is seeking a Security TDA Lead to drive governance, risk, compliance and vulnerability assessment across a complex, multi-technology environment. You will lead security-by-design aligned to ISO 27001, Cyber Essentials Plus and architectural standards.

The role combines GRC operational leadership with cyber technical design to ensure secure architectures and effective risk management across the account. Strong experience in GRC, risk, and security architecture is required.