Senior Security Architect - Hybrid Cloud & Risk Leadership

Thames Water Utilities Limited; Reading; Hybrid; GBP 77,000 - 95,000; Full time

Benefits offered by this job

26 days annual leave

Performance-related pay

Generous pension scheme

Health & wellbeing benefits

Job summary

Thames Water Utilities Limited is seeking a Senior Security Architect to develop and maintain security architecture strategy, roadmaps and reusable patterns. You will provide leadership across security domains and ensure secure-by-design throughout technology delivery in a hybrid environment.

You will collaborate with Enterprise Architects, Security Engineering, Operations, and business stakeholders to translate complex requirements into effective security controls and governance across critical

Qualifications

• Extensive experience developing security architecture strategy, roadmaps, and target-state architectures.
• Proven delivery of security architecture across full solution lifecycles with secure-by-design principles.
• Experience with cloud security in hybrid/On-prem environments and multiple cloud providers.

Responsibilities

• Develop and maintain security architecture principles, requirements, guardrails, standards, and reference architectures.
• Lead threat modelling and security risk assessments translating requirements into controls.
• Provide architecture oversight across lifecycle from design reviews to go-live assurance.
• Collaborate with Enterprise/Solution Architects, Security Engineering and Operations to embed security into initiatives.
• Ensure alignment with ISO 27001, NIST CSF, CIS Controls, CAF and Secure by Design.

Skills

Security Architecture Leadership

Threat Modelling

Stakeholder Engagement

Security Governance

Cloud Security

Secure-by-Design Principles

Risk Management

Security Frameworks

Tools

Microsoft Azure

AWS

GCP

Job description

Thames Water Utilities Limited is seeking a Senior Security Architect to develop and maintain security architecture strategy, roadmaps and reusable patterns. You will provide leadership across security domains and ensure secure-by-design throughout technology delivery in a hybrid environment.

You will collaborate with Enterprise Architects, Security Engineering, Operations, and business stakeholders to translate complex requirements into effective security controls and governance across critical