Cyber Security Architect

Uk Power Networks; Italia; Ibrido; EUR 74.000 - 90.000; Tempo pieno

Vantaggi offerti da questo lavoro

25 Days Annual Leave

Private Medical Cover

Pension Plan

Cycle to Work

Tech and Green Car Schemes

Employee Assistance Programme

Descrizione del lavoro

Uk Power Networks is seeking a Cyber Security Architect to lead security design and policies across cloud and on-premise environments. You will drive security standards, runbooks, and governance to protect data, networks, and systems from threats, while guiding teams and partners.

The role requires blending architecture leadership with hands-on security delivery, including cloud security measurement, risk governance, and collaboration with multiple DevOps squads.

Competenze

• Security certifications essential: AZ-500, Azure Architect, CompTIA Security+.
• Experience with Azure AD/M365 security features and cloud security controls.
• Ability to translate security requirements into concrete design and governance.

Mansioni

• Implement cyber security plans and roadmaps aligned with strategy.
• Develop security architecture frameworks, policies, and blueprints.
• Collaborate with DevOps to secure CI/CD pipelines and cloud deployments.
• Communicate complex security concepts to senior stakeholders.

Conoscenze

Azure Cloud security

Cyber security principles

Communication skills

Stakeholder management

DevOps collaboration

Formazione

AZ-500 Certification

Azure Solutions Architect Expert

CompTIA Security+

Strumenti

Terraform

AKS

Docker

CI/CD tools

Descrizione del lavoro

Cyber Security Architect

Salary: Up to €82,000 yearly

Azienda: Uk Power Networks

Tipo Lavoro: Full Time

This Cyber Security Architect will report to the Cyber Security Architecture Manager and will work within the Information Systems directorate based in either our London office (Elephant & Castle or Camden). You will be a permanent employee.

You will attract a salary of up to £82,000.00 (subject to experience) and a bonus of 7.5%. This role can also offer blended working after probationary period (6 months) - 3 days in the office and 2 remote.

Close Date: 10/07/2026

Benefit and Perks

• 25 Days Annual Leave plus bank holidays.
• Private Medical Cover
• Reservist Leave – Additional 18 days full pay and 22 unpaid
• Personal Pension Plan – Personal contribution rates of 4% or 5% (UK Power Networks will make a corresponding contribution of 8% or 10%)
• Tenancy Loan Deposit Scheme, Season Ticket Loan
• Tax efficient benefits: Cycle to Work, Home & Tech, and Green Car Leasing Schemes
• Occupational Health support
• Switched On – scheme providing discount on hundreds of retailers' products
• Discounted gym membership
• Employee Assistance Programme

Job purpose

You will develop the security systems and policies within the organisation and will ensure that UK Power Networks data, network, and systems are protected from cyber threats and will comply with the relevant standards and regulations. You will develop security standards, best practices, and guidelines to support the cyber security leadership team and provide training and guidance to other security staff, teams, and partners.

Dimensions

UK Power Networks is expanding its presence in Cloud and enhancing its on-prem OT Mission Critical Systems. It is necessary that a secure environment is developed for the hosting and management of our critical information assets. We ask that you have a blend of skillsets across cyber security including solution design, configuration, implementation, operation, governance, change management, communications, and the understanding of protecting data in employing the use of relevant encryption standards. The main measure of success is maintaining regulatory compliance and improving the technical and organisational resilience of UKPN concerning the ever‑changing cyber threat landscape.

• People – work collaboratively in a team of circa 8 permanent and temporary cyber security architecture resources.
• Financial – no direct budget responsibility.
• Suppliers – regular interaction with 3rd party service providers, specialist technical consultants and cyber security tooling vendors.
• Communication – communicate technical cyber security concepts to all kinds of colleagues across different levels of seniority to facilitate and ensure common understanding of decisions taken across the business.
• Partner – establish and maintain collaborative working relationships with internal and external technology teams and third party providers, suppliers, and partners to improve outcomes and create agreement around a course of action.

Principal accountabilities

• Implement the cyber security plans, technology roadmaps based on sound enterprise architecture practices to help implement UK Power Networks Cyber Security Strategy ensuring agreement to the company vision, values, and strategic goals.
• Develop the security architecture framework including policies, standards, procedures, guidelines and blueprints that enables the enterprise to develop and implement security solutions and capabilities in projects and operations that are aligned with business, technology, and threat drivers.
• Participate in the Architecture Review Board (ARB) as the design authority for all cyber security for all cyber security matters through the review and approval of all solution proposals.
• Create target and transition architectures which conform to best practice, and UKPN's Information Security policies and underpinning standards.
• Contribute to the development of cloud security and network architecture policies to facilitate the short, medium, and long‑term planning and enhancement of the technology landscape.
• Translate our requirements into technical solutions, and communicate with product teams on your design.
• Develop cloud security measurement tooling to manage cloud performance, resources, and cost to ensure budgetary compliance and make recommendations for improvement.
• Work with multiple DevOps teams across the business to assess existing cloud security architectures, advocate secure by design, secure coding practices, and define strategies that provide clear progression in improving security of the solutions and CI/CD pipelines in the cloud.
• Establish and maintain relationships with important partners on matters of cyber security that maintain business support for cyber security and network architecture measures and improvements.

Nature and Scope

The Information Systems Department works across UK Power Networks, supporting us in the achievement of our vision to become the best performing DNO. The team achieve this through the provision of technology solutions and the optimisation of current solutions to improve how we operate. Continuous improvement, customer service and seamless delivery is at the heart of this ethos and are therefore strongly underpinned by effective cyber security.

You will work with five disciplines within the Cyber Security Team, Enterprise Architecture, Technical Teams, IT Service Providers, Project, Innovation, and partners to implement and increase the security infrastructure, systems, and services.

Qualifications

Essential

• Experienceacquiringan understanding of cyber security technologies and principles within an operational technology (OT) environment or enterprise environments and utilising the security features of Azure Cloud, Microsoft 365, and other Cyber related Solutions is essential.
• Relevant security certifications such as Microsoft Azure Security Technologies (AZ-500), Azure Solutions Architect Expert or CompTIA Security+ are essential.
• Working knowledge of Cyber Essentials, ISO27001:2022, CSA Cloud Controls Matrix, NCSC CAF and GDPR, is important to ensure that data is being managed in a compliant manner are essential.
• Experience determining requirements and developing security solution design, both technical and process‑oriented are essential.
• Experience in security assessment, risk management, and governance for secure infrastructure, systems, and services are essential.
• Quality review solution providers high‑and low‑level solution designs ensuring they align to the data architecture and policies are essential.
• Proven experience of developing a credible and practical target architecture for the Security domain, which supports the Business and IT strategy is essential.
• Ability to communicate complex ideas in a focused, simple, and commercially relevant manner to a senior audience is essential.
• Excellent influencing skills, with the ability to advise and recommend with credibility at all levels and manage complex partner relationships is essential.
• Ability to communicate complex ideas in a focused, simple, and commercially relevant manner to a senior audience is essential.
• Excellent influencing skills, with the ability to advise and recommend with credibility at all levels and manage complex partner relationships is essential.
• Experience working in a team environment and with range of internal and external people, collaborating with Project Managers, Business Managers, and Technical Engineering Teams to understand customer needs then designing secure, "fit for purpose" business and technical solutions is essential.

Certifications

• CompTIA Security+ (Essential)
• AZ-500 or similar (Essential)

Desirable

• Experience working as a Cyber Security Architect, OT Cyber Security Architect, Cloud Security Architect (DevSecOps)or relevant Cyber Engineering Role with Architecture responsibilities is desirable.
• A degree in Computer Science, Computer Engineering, Information Technology, or relevant field with cognate experience designing, implementing, and supporting Cyber Security solutions is desirable.
• Relevant security certifications such as Further security certifications include CISSP, CISSP-ISSAP, CCSP, CCSK are desirable.
• Containerisation experience with Azure Kubernetes Service (AKS) and Docker, including the use of tools such as Vagrant and LXCare desirable
• Experience with Infrastructure as Code (IaC) Automation tools, such as Terraform and deploying "secure by design" IaC approach with the DevOps team are desirable.
• Experience in enterprise architecture frameworks such as TOGAF is desirable.
• Experience working within a regulated environment, preferably Energy sector Critical National Infrastructure (CNI) is desirable.

Certifications

• TOGAF (Desirable)
• SC-100 (Desirable)
• CISSP (Desirable)

Health & Safety Responsibilities

Managers and supervisors carry both legal and company responsibilities for ensuring the health and safety of their employees, those under their control and those who might be affected by the work undertaken, i.e. public, visitors and employees of other organisations. This includes briefing individuals working for them and ensuring there is the necessary understanding, competence and application of requirements to work safely and without harming the environment.

Employees will ensure they understand the health and safety risks involved in their work activities and their responsibility to apply the controls needed to manage those risks to acceptable levels. Similarly where work activities can have an adverse impact upon the environment, and where there are legal requirements, employees will understand those impacts and the controls they must ensure are applied.

If in doubt ask!

We are committed to equal employment opportunity regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We are proud to be an equal opportunity workplace.

We are committed to safeguarding and promoting the welfare of children and young people. Where applicable, this role is subject to safer recruitment processes and robust pre‑employment checks.

If you have any queries in connection to this vacancy or your application, please contact us at [e-mail] quoting the vacancy reference number and a member of the team will get in touch with you as soon as possible.