Senior Security Architect

SSE plc; Glasgow; Hybrid; GBP 60,000 - 90,000; Full time

Job summary

SSE plc is seeking a Senior Security Architect to lead the design, governance and implementation of security architectures across digital, cloud and data-driven solutions. You will embed threat modelling, drive consistent controls, and collaborate with cross-functional teams to ensure secure, compliant delivery in both agile and traditional environments.

The role requires SC vetting, UK residency and alignment with NCSC/NIST frameworks.

Qualifications

• Proven experience designing and governing security architectures in complex or regulated environments.
• Strong cloud security knowledge (AWS, Azure), IAM, encryption and zero-trust concepts.
• Experience with threat modelling and translating threats into technical controls.
• Familiarity with regulatory frameworks (e.g., NIS) and applying them to design.
• Professional security certifications (CISSP, CCSP, Azure/AWS Security) or equivalent.
• SC level vetting required with UK residency (5 years).

Responsibilities

• Lead the design and assurance of security architectures across digital, cloud and data‑driven solutions, ensuring best practices and regulatory alignment.
• Facilitate threat-modelling to identify risks, attack paths and mitigations early in development.
• Ensure consistent security controls across business units with reusable patterns and reference architectures.
• Collaborate with architecture, engineering and delivery teams to embed security in agile and traditional delivery, including DevSecOps and automated testing.
• Own SSEN Distribution security architecture end-to-end, overseeing risks, controls, compliance and secure operations.

Skills

Security architecture design

Cloud security (AWS/Azure)

Threat modelling

Regulatory/compliance knowledge

Security certifications

Vetting readiness

Job description

Base Location: You'll be expected to spend 50% of your working week in one of the following locations : Glasgow, Perth, Reading or Havant

Salary: £59,800 - £89,800 + performance-related bonus and a range of benefits to support your finances, wellbeing and family.

Working Pattern: Permanent | Full Time | Flexible First options available

Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk)

The Role

The role of the Senior Security Architect demands business insight; technical acuity; and the ability to think, communicate and write at various levels of abstraction. A formal information security architecture process is one of the key enablers of a security programme. It is the planning process that provides the models, templates and principles that are used to design, implement and operate information security solutions. It enables consistency, leverage and reuse to satisfy the business requirements for security services in an optimum manner.

You will

• Lead the design and assurance of security architectures across digital, cloud and data‑driven solutions, ensuring they follow best practice, comply with regulations and meet organisational security standards.
• Facilitate and guide threat‑modelling activities—such as identifying risks, attack paths and mitigations—so that security is embedded early in every solution
• Ensure consistent and comprehensive application of security controls across the business unit, governing reusable patterns, principles and reference architectures
• Work collaboratively with architecture, engineering and delivery teams to integrate security into agile and traditional delivery models, including support for DevSecOps and automated security testing.
• Provide end‑to‑end ownership of SSEN Distribution security architecture, including oversight of risks, controls, compliance and secure operations, ensuring alignment with frameworks such as NCSC, NIST and IEC 62443

You have

• Proven experience designing and governing security architectures in complex or regulated enterprise environments, ideally covering cloud, identity, data, network and application security
• Strong understanding of cloud security [SaaS, PaaS, IaaS (including AWS, Azure) etc], including IAM, network protection, encryption, monitoring, zero‑trust concepts and secure cloud‑native design
• Hands‑on experience with threat‑modelling techniques and the ability to translate identified threats into meaningful, actionable technical controls.
• Practical knowledge of key regulatory and compliance frameworks including NIS, , with the ability to apply to solution design
• Relevant professional certifications (e.g., CISSP, CCSP, Azure Security Engineer, AWS Security Specialty) or equivalent experience that demonstrates deep security capability
• Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk)

About SSE

SSE’s purpose is to provide energy needed today while building a better world of energy for tomorrow. We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. Our Transforming for Growth investment plansees us investing £33bn in critical electricity infrastructure across the five years to 2030.

Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day‑to‑day support in emerging technologies, data and analytics, cyber security and more.

Flexible benefits to fit your life

Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest‑free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.

Work with an equal opportunity employer

SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact [e-mail] / 01738 275 846 to discuss how we can support you.

We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.

#LI-DB1

#LI-Hybrid