Information Security Architect

About the role

The Information Security Architect is a senior technical role leading the design and delivery of security solutions across the organisation's infrastructure and technology programmes. Acting as a subject matter expert, the Architect guides complex security infrastructure projects so they are secure by design and aligned with the organisation's risk appetite and security vision. The role sits within the Security Operations function of the Information, Security and Risk department.

Key responsibilities

• Lead security architecture and solution design for strategic initiatives such as ZTNA, PIM/PAM, passwordless authentication, network segmentation, DLP, CASB, vulnerability management and threat detection, with a SOC-centric approach.
• Define and maintain security architecture and governance controls for cloud, data and AI platforms, including CSPM, DSPM and AI DSPM, and ensure logging and telemetry feed SIEM solutions.
• Architect Microsoft stack controls (Defender XDR, Entra ID) and standards on AWS and Google Workspace; set security baselines for new and existing technologies.
• Lead the secure adoption and governance of AI and generative AI, and produce architecture documentation including ADRs and technical standards.
• Act as the Information Security Review (ISR) representative for IT projects: assess solutions and designs for risk and compliance, run risk assessments of AI services, and approve changes while maintaining an ISR register.
• Contribute to security policies, support ISO 27001:2022 ISMS and SOC 2 Type 2 maintenance, and liaise with vendors and managed service providers.

Required profile

• 5+ years of information/cyber security experience, including 2+ years in architecture.
• Demonstrable experience designing and delivering complex security infrastructure projects.
• Fluent English with strong written and verbal communication skills.
• Desirable: professional certifications such as CISSP, CISM, SABSA, TOGAF or Microsoft Security Architect (SC-100); global enterprise experience; familiarity with CSPM, CWPP, Microsoft Sentinel, Qualys VMDR/WAS, Netskope SASE and security automation with infrastructure-as-code.

Required skills

• ZTNA, PIM/PAM, passwordless authentication, network segmentation, DLP, CASB
• Microsoft Entra ID, Defender suite, Microsoft Purview, Azure networking security
• CSPM, DSPM and AI security and governance
• Identity and access management, privileged access, just-in-time access, zero trust
• Firewall policy design, micro-segmentation, secure remote access
• ISO 27001:2022, SOC 2 Type 2, NIST CSF, CIS Controls