Security Architect (UK Wide, GB)

Atos; United Kingdom; On-site; GBP 75,000 - 110,000; Full time

Job summary

Atos is seeking a Security Architect to join the Security Governance capability in regulated UK Government and financial services environments. You will provide independent security reviews, governance oversight, risk assessments and assurance across programmes and suppliers, ensuring security-by-design and compliance with industry standards.

You will work with other security architects and assurance managers to balance security, business and operational priorities, delivering defensible

Qualifications

• Significant experience within information security, cyber security, information security architecture, or DevOps.
• Experience providing security assurance, architecture reviews, or governance oversight.
• Strong understanding of security risk management and security control frameworks.
• Experience reviewing cloud, SaaS and enterprise technology architectures.
• Excellent stakeholder management, communication, and influencing skills.

Responsibilities

• Security Governance: Participate in Architecture Review Boards and provide review/security sign-off in line with governance requirements.
• Security Governance: Define and enforce secure architecture standards, reference patterns, and mandatory security controls.
• Security Architecture Assurance: Review/approve security-relevant designs and major technical changes.
• Security Architecture Assurance: Act as a security design authority across infrastructure, platforms, and applications.
• Security Architecture Assurance: Conduct independent security architecture reviews and assess designs against security standards, policies and control frameworks.
• Security Risk Management: Perform security risk assessments (to identify vulnerabilities), threat assessments, and support risk treatment decisions.
• Supplier and Cloud Assurance: Assess third-party suppliers, SaaS platforms and cloud services using assurance evidence and independent testing reports.
• Compliance and Regulatory Assurance: Ensure alignment with NIST CSF, NCSC guidance, CIS Controls, ISO/IEC 27001, UK GDPR, UK Gov. Security Classifications.
• Security Assurance: Coordinate and support IT Health Checks (ITHCs), ensure findings are reviewed, risk-assessed, and remediated through appropriate governance processes.
• Security Advisory: Provide pragmatic security guidance and act as a trusted adviser to delivery and business stakeholders.

Skills

Information security

Security architecture

Security assurance

Architecture reviews

Governance oversight

Risk management

Cloud/SaaS architectures

Stakeholder management

Communication skills

Education

CCSP

Job description

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements. With more than 52,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand. A trusted partner in operating complex and mission-critical environments, Atos supports organizations across highly regulated and sovereign contexts.

About Atos Group

Atos Group is a global leader in digital transformation with c. 54,000 employees and annual revenue of c. €7.2 billion, operating in 54 countries under two brands - Atos for services and Eviden for products and systems. European number one in cybersecurity and a leader in cloud, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is listed on Euronext Paris.

About the role

We are seeking a Security Architect to join the BPS Security Architecture & Assurance (Security Governance) capability within highly regulated UK Government and financial services environments. Working across complex, business-critical platforms and alongside other Security Architects and Assurance Managers, you will ensure security is embedded by design and evidenced throughout delivery. This role is focused on judgement, influence and risk-based decision-making, balancing security, business and operational priorities to deliver defensible architecture, assurance outcomes and risk assessments that will withstand client and audit scrutiny. The successful candidate will provide security architecture oversight and assurance across client programmes, projects, services and third-party suppliers within complex enterprise and regulated environments. The role is responsible for determining whether proposed solutions, designs and services meet organisational security requirements, regulatory obligations and good industry practice. The role does not design or implement technical solutions. Instead, it provides independent review, governance, risk assessment, and security approval activities throughout the solution lifecycle. Where purpose meets career:

Work & Team Culture

Collaborative, inclusive, and supportive environment that encourages teamwork, flexibility, and continuous learning. Contribution & Impact - Opportunity to take ownership, contribute meaningful ideas, and make a visible impact on business and customer outcomes. Better Technology - Work with modern, innovative technologies that enhance skills, improve efficiency, and support continuous digital transformation.

Core Responsibilities

• Security Governance: Participate in Architecture Review Boards and provide review/security sign-off in line with governance requirements.
• Security Governance: Define and enforce secure architecture standards, reference patterns, and mandatory security controls.
• Security Architecture Assurance: Review/approve security-relevant designs and major technical changes.
• Security Architecture Assurance: Act as a security design authority across infrastructure, platforms, and applications.
• Security Architecture Assurance: Conduct independent security architecture reviews and assess designs against security standards, policies and control frameworks.
• Security Risk Management: Perform security risk assessments (to identify vulnerabilities), threat assessments, and support risk treatment decisions.
• Supplier and Cloud Assurance: Assess third-party suppliers, SaaS platforms and cloud services using assurance evidence and independent testing reports.
• Compliance and Regulatory Assurance: Ensure alignment with NIST CSF, NCSC guidance, CIS Controls, ISO/IEC 27001, UK GDPR, UK Gov. Security Classifications.
• Security Assurance: Coordinate and support IT Health Checks (ITHCs), ensure findings are reviewed, risk-assessed, and remediated through appropriate governance processes.
• Security Advisory: Provide pragmatic security guidance and act as a trusted adviser to delivery and business stakeholders.

Essential Skills and Experience

• Significant experience within information security, cyber security, information security architecture, or DevOps.
• Experience providing security assurance, architecture reviews, or governance oversight.
• Strong understanding of security risk management and security control frameworks.
• Experience reviewing cloud, SaaS and enterprise technology architectures.
• Excellent stakeholder management, communication, and influencing skills.

Desirable Certifications/Qualifications

• CCSP