Security Architect

Security Architect – Azure, Zero Trust, SASE & AI Security

London | Hybrid – 40% office attendance

£90,000–£105,000

We are recruiting an experienced Security Architect for a leading professional services firm.

This is a pivotal position offering genuine ownership of the firm’s technology security strategy across on-premises, cloud and hybrid environments. You will act as the organisation’s go-to technical authority for cybersecurity, working closely with the CTO, CISO, Information Security, Legal, Risk and Compliance teams.

The role also offers the opportunity to shape the firm’s approach to AI security, establishing the governance, standards and architectural controls required for the safe adoption of AI and machine-learning technologies.

Key responsibilities:

Own the enterprise security architecture strategy, vision and roadmap. Lead security architecture across Azure, on-premises and hybrid environments. Develop security standards, principles, patterns and high-level designs. Own security designs from strategy and roadmap through to implementation. Define the firm’s AI-security architecture and governance framework. Lead the architectural approach to Zero Trust and SASE. Advise on identity, network segmentation, encryption, data residency and cloud security. Evaluate security technologies and support vendor selection. Embed security into new products, platforms and technology projects. Translate ISO 27001, NIST, CIS and GDPR requirements into practical technical controls. Present security recommendations to senior technology and business stakeholders.

Required experience:

At least 5–10 years’ experience in Security Architecture or a closely comparable role. Previous responsibility for security strategy, roadmaps and architectural governance. Strong experience across cloud, on-premises and hybrid environments. Azure security architecture experience. Knowledge of Zero Trust, SASE, ZTNA, CASB, IAM, firewalls and network segmentation. Experience producing architectural standards, security patterns and design documentation. Proven ownership of security designs throughout the product or technology lifecycle. Strong communication skills and the ability to work across technical, legal, risk and compliance functions. Experience operating as a senior cybersecurity SME rather than stepping into architecture for the first time.

Desirable experience:

AI-security architecture or governance, including risks such as prompt injection, data leakage and model integrity. Zscaler, Palo Alto Prisma, Netskope or an equivalent SASE platform. CISSP, CISM, CCSP, TOGAF or SABSA certification. ISO 27001, NIST, NIS2 and data-residency requirements. Legal or professional-services experience. BYOK or hardware security module solutions.