Senior Security Architect

SSE plc; Perth; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Flexible First options

Private healthcare discounts

Wellbeing resources

Cycle to Work

Family benefits

Job summary

SSE plc is seeking a Senior Security Architect to lead the design and governance of security architectures across digital, cloud and data-driven solutions. The role requires running threat modelling activities and ensuring secure operations aligned with NCSC, NIST and IEC 62443.

Expect to collaborate with architecture, engineering and delivery teams to embed security into agile and traditional delivery models, including DevSecOps practices and automated security testing.

Qualifications

• Proven experience designing and governing security architectures in complex environments.
• Strong understanding of cloud security (SaaS, PaaS, IaaS) including IAM and zero-trust concepts.
• Hands-on threat modelling translating threats into actionable controls.
• Knowledge of regulatory frameworks such as NIS/IEC 62443 and applying them to design.
• Professional security certifications (e.g., CISSP, CCSP) or equivalent experience.

Responsibilities

• Lead design and assurance of security architectures across digital, cloud and data-driven solutions.
• Facilitate threat modelling to identify risks, attack paths and mitigations.
• Apply security controls consistently across business units and reference architectures.
• Collaborate with architecture, engineering and delivery teams to integrate security into agile and traditional models.
• Own SSEN Distribution security architecture including risk, controls, compliance and secure operations.

Skills

Security architecture

Cloud security

Threat modelling

Regulatory compliance

Certifications

IAM

Secure cloud-native design

Tools

AWS

Azure

Job description

Base Location: You'll be expected to spend 50% of your working week in one of the following locations : Glasgow, Perth, Reading or Havant
Salary: £59,800 - £89,800 + performance-related bonus and a range of benefits to support your finances, wellbeing and family.
Working Pattern: Permanent | Full Time | Flexible First options available
Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk)

The Role

The role of the Senior Security Architect demands business insight; technical acuity; and the ability to think, communicate and write at various levels of abstraction. A formal information security architecture process is one of the key enablers of a security programme. It is the planning process that provides the models, templates and principles that are used to design, implement and operate information security solutions. It enables consistency, leverage and reuse to satisfy the business requirements for security services in an optimum manner.

You will

• Lead the design and assurance of security architectures across digital, cloud and data‑driven solutions, ensuring they follow best practice, comply with regulations and meet organisational security standards.
• Facilitate and guide threat‑modelling activities—such as identifying risks, attack paths and mitigations—so that security is embedded early in every solution
• Ensure consistent and comprehensive application of security controls across the business unit, governing reusable patterns, principles and reference architectures
• Work collaboratively with architecture, engineering and delivery teams to integrate security into agile and traditional delivery models, including support for DevSecOps and automated security testing.
• Provide end‑to‑end ownership of SSEN Distribution security architecture, including oversight of risks, controls, compliance and secure operations, ensuring alignment with frameworks such as NCSC, NIST and IEC 62443

You have

• Proven experience designing and governing security architectures in complex or regulated enterprise environments, ideally covering cloud, identity, data, network and application security
• Strong understanding of cloud security [SaaS, PaaS, IaaS (including AWS, Azure) etc], including IAM, network protection, encryption, monitoring, zero‑trust concepts and secure cloud‑native design
• Hands‑on experience with threat‑modelling techniques and the ability to translate identified threats into meaningful, actionable technical controls.
• Practical knowledge of key regulatory and compliance frameworks including NIS, , with the ability to apply to solution design
• Relevant professional certifications (e.g., CISSP, CCSP, Azure Security Engineer, AWS Security Specialty) or equivalent experience that demonstrates deep security capability
• Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk)

About SSE

SSE’s purpose is to provide energy needed today while building a better world of energy for tomorrow. We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. Our Transforming for Growth investment plan sees us investing £33bn in critical electricity infrastructure across the five years to 2030.
Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world. They provide expertise, advice and day‑to‑day support in emerging technologies, data and analytics, cyber security and more.

Flexible Benefits To Fit Your Life

Enjoy discounts on private healthcare and gym memberships. Wellbeing benefits like a free online GP and 24/7 counselling service. Interest‑free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme. As well as generous family entitlements such as maternity and adoption pay, and paternity leave.

Work with an equal opportunity employer

SSE will make any reasonable adjustments you need to ensure that your application and experience with us is positive. Please contact [e-mail] / 01738 275 846 to discuss how we can support you. We're dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.