Security Technical Lead

Randstad Technologies Recruitment; Sheffield; Hybrid; GBP 90,000 - 125,000; Full time

Benefits offered by this job

Hybrid work model

Office in Sheffield

Job summary

Randstad Technologies Recruitment is hiring a Security Technical Lead - Application & Cloud Security Architect in Sheffield. The role is hybrid, requiring 3 days in the office, with a 6-month contract commencing Jan 2027.

You will partner with leadership to manage material cyber risks and drive security-by-design across change delivery. Key qualifications include advanced cloud and application security architecture expertise, strong risk articulation, and audit engagement experience.

Qualifications

• Significant cybersecurity and risk management experience in regulated financial services.
• Advanced cloud security and application security architecture expertise.
• Strong ability to articulate risk and map controls for audits.

Responsibilities

• Act as senior cybersecurity partner for domains, advising on material cyber risks.
• Own and drive domain risk register with timebound remediation plans.
• Embed security-by-design across change delivery and solution designs.
• Strengthen in-service security posture across IAM/PAM, logging, and vulnerability management.
• Oversee supplier and SaaS cyber risk onboarding and renewals.
• Lead governance, reviews, and audit readiness; close findings timely.
• Provide cybersecurity leadership during major incidents and translate exposures for executives.

Skills

Cybersecurity risk management

Cloud Security Architecture

Application Security Architecture

Risk articulation (Cause-Event-Impact)

Audit engagement

Governance leadership / chairing

IAM/PAM, vulnerability management

SIEM / logging proficiency

English communication

Education

Certifications such as CISSP / CISM / CRISC / CISA

ISO27001 knowledge

Job description

We're Hiring: Security Technical Lead - Application & Cloud Security Architect

Location: Sheffield, UK

Work Model: Hybrid ( 3 days in the office)

Contract: 6 months (starting fromJan 2027)

Key Responsibilities:

• Act as the senior cybersecurity partner for GFT domains, advising leadership and delivery teams on material cyber risks, control expectations, and risk-based trade-offs.
• Own and drive the domain risk register, ensuring risks are clearly articulated (cause-event-impact) with timebound remediation plans.
• Embed proportionate security-by-design across change delivery, solution designs, and acceptance criteria.
• Strengthen in-service security posture across identity & access risk (including PAM), threat & vulnerability management, logging/monitoring, and configuration weaknesses.
• Oversee supplier and SaaS cyber risk for onboarding and renewals, driving mitigations for access, data protection, and resilience.
• Lead control governance, thematic reviews, and audit readiness, ensuring timely closure of findings.
• Provide cybersecurity leadership support during major incidents, translating technical exposures into executive business impacts (financial reporting, payroll, liquidity).

Skills & Experience Required:

• Significant cybersecurity and technical risk management experience within a regulated Financial Services or Tier-1 Banking environment.
• Advanced expertise in Cloud Security Architecture (P3 - Advanced) and Application Security Architecture.
• Strong capability in cyber risk articulation (Cause-Event-Impact), issue management, control mapping, and audit engagement.
• Solid technical foundation across IAM/PAM, vulnerability management, SIEM/logging, SaaS/third-party risk, and AI security.
• Fluent English with excellent written and verbal communication skills, confident in chairing governance forums and challenging constructively.
• Must have UK Right to Work and be able to attend the Sheffield office 3 days per week.

Desirable Qualifications:

• Industry certifications such as CISSP, CISM, CRISC, CISA, ISO27001, or CEH.
• Direct experience supporting technology for Finance, Treasury, or Risk domains with sensitivity to financial controls and regulatory reporting.
• Familiarity with operational resilience and technology risk expectations within financial services.