Security Technical Lead/ Application Security Architect

Randstad Technologies; Sheffield; Hybrid; GBP 120,000 - 166,000; Full time

Job summary

Randstad Technologies is seeking a Security Technical Lead / Application & Cloud Security Architect in Sheffield, UK. The role is hybrid, requiring three days in the office, for a fixed-term contract of five months (Jan 2027–May 2027).

You will partner with GFT domains to drive risk-based security strategies across cloud and application security, IAM/PAM, and third-party risk. You will lead governance, risk articulation, and incident support, ensuring remediation plans are time-bound and aligned

Qualifications

• Significant cybersecurity and risk management experience in regulated finance.
• Advanced cloud security and application security architecture expertise.
• Strong ability to articulate cyber risk (Cause-Event-Impact) and manage audit engagements.
• Solid IAM/PAM, vulnerability management, SIEM, and third-party risk knowledge.
• Fluent English with strong written and verbal communication skills.

Responsibilities

• Act as senior cybersecurity partner for GFT domains, advising on material cyber risks and trade-offs.
• Own domain risk register with timebound remediation plans.
• Embed security-by-design across change delivery and solution designs.
• Strengthen security posture across identity, threat management, logging, and configurations.
• Oversee supplier and SaaS cyber risk onboarding and renewals.
• Lead control governance, reviews, and audit readiness.
• Provide cybersecurity leadership during major incidents and translate exposures to business impact.

Skills

Cloud security

Application security

Cyber risk management

IAM/PAM

Vulnerability management

SIEM/logging

SaaS/Third-party risk

AI security

Governance/controls

English communication

Job description

We're Hiring: Security Technical Lead - Application & Cloud Security Architect

Location: Sheffield, UK

Work Model: Hybrid ( 3 days in the office)

Contract: 5 months (Jan 2027 - May 2027)

My client, a leading global financial institution, is seeking a Security Technical Lead / Application & Cloud Security Architect to partner with core Global Finance & Technology (GFT) domains (Risk, Finance, Treasury, Corporate Functions). Ideal for senior architects with deep expertise in cloud security, risk management, and application security in regulated banking environments.

Key Responsibilities:

• Act as the senior cybersecurity partner for GFT domains, advising leadership and delivery teams on material cyber risks, control expectations, and risk-based trade-offs.
• Own and drive the domain risk register, ensuring risks are clearly articulated (cause-event-impact) with timebound remediation plans.
• Embed proportionate security-by-design across change delivery, solution designs, and acceptance criteria.
• Strengthen in-service security posture across identity & access risk (including PAM), threat & vulnerability management, logging/monitoring, and configuration weaknesses.
• Oversee supplier and SaaS cyber risk for onboarding and renewals, driving mitigations for access, data protection, and resilience.
• Lead control governance, thematic reviews, and audit readiness, ensuring timely closure of findings.
• Provide cybersecurity leadership support during major incidents, translating technical exposures into executive business impacts (financial reporting, payroll, liquidity).

Skills & Experience Required:

• Significant cybersecurity and technical risk management experience within a regulated Financial Services or Tier-1 Banking environment.
• Advanced expertise in Cloud Security Architecture (P3 - Advanced) and Application Security Architecture.
• Strong capability in cyber risk articulation (Cause-Event-Impact), issue management, control mapping, and audit engagement.
• Solid technical foundation across IAM/PAM, vulnerability management, SIEM/logging, SaaS/third-party risk, and AI security.
• Fluent English with excellent written and verbal communication skills, confident in chairing governance forums and challenging constructively.
• Must have UK Right to Work and be able to attend the Sheffield office 3 days per week.

Desirable Qualifications:

• Industry certifications such as CISSP, CISM, CRISC, CISA, ISO27001, or CEH.
• Direct experience supporting technology for Finance, Treasury, or Risk domains with sensitivity to financial controls and regulatory reporting.
• Familiarity with operational resilience and technology risk expectations within financial services.