Senior Cloud & App Security Architect - Banking (Hybrid)

Randstad Technologies; Sheffield; Hybride; GBP 120 000 - 166 000; Plein temps

Résumé du poste

Randstad Technologies is seeking a Security Technical Lead / Application & Cloud Security Architect in Sheffield, UK. The role is hybrid, requiring three days in the office, for a fixed-term contract of five months (Jan 2027–May 2027).

You will partner with GFT domains to drive risk-based security strategies across cloud and application security, IAM/PAM, and third-party risk. You will lead governance, risk articulation, and incident support, ensuring remediation plans are time-bound and aligned

Qualifications

• Significant cybersecurity and risk management experience in regulated finance.
• Advanced cloud security and application security architecture expertise.
• Strong ability to articulate cyber risk (Cause-Event-Impact) and manage audit engagements.
• Solid IAM/PAM, vulnerability management, SIEM, and third-party risk knowledge.
• Fluent English with strong written and verbal communication skills.

Responsabilités

• Act as senior cybersecurity partner for GFT domains, advising on material cyber risks and trade-offs.
• Own domain risk register with timebound remediation plans.
• Embed security-by-design across change delivery and solution designs.
• Strengthen security posture across identity, threat management, logging, and configurations.
• Oversee supplier and SaaS cyber risk onboarding and renewals.
• Lead control governance, reviews, and audit readiness.
• Provide cybersecurity leadership during major incidents and translate exposures to business impact.

Connaissances

Cloud security

Application security

Cyber risk management

IAM/PAM

Vulnerability management

SIEM/logging

SaaS/Third-party risk

AI security

Governance/controls

English communication

Description du poste

Randstad Technologies is seeking a Security Technical Lead / Application & Cloud Security Architect in Sheffield, UK. The role is hybrid, requiring three days in the office, for a fixed-term contract of five months (Jan 2027–May 2027).

You will partner with GFT domains to drive risk-based security strategies across cloud and application security, IAM/PAM, and third-party risk. You will lead governance, risk articulation, and incident support, ensuring remediation plans are time-bound and aligned