CISO Solution Architect (9936)

Senior Security Architect (contractor)- Data Protection & Azure Cloud Security

Rate: Flexible

Duration: 1 year

Hybrid working - 8 days onsite per month (Inside of IR35)

We are looking for an experienced Senior Security Architect to join a major enterprise cybersecurity function, taking a leading role in the design and governance of security architecture across Data Protection and Cloud Security .

This is a senior architecture position within a large, complex and highly regulated environment. You will work across business, technology, engineering, risk and security teams to ensure new applications, platforms and cloud solutions are designed securely from the outset.

A major focus of the role will be enterprise data protection and Azure cloud security , including the architecture and governance of controls covering data classification, discovery, labelling, lifecycle management and protection of sensitive information.

Key Responsibilities

Lead the design and delivery of end-to-end security architecture across enterprise applications, platforms and cloud environments. Develop high-level security designs and translate business, technology and risk requirements into practical security architecture. Define and maintain security architecture principles, standards, patterns and reusable design guidance . Provide architecture governance and design assurance, challenging proposed solutions and ensuring security requirements are addressed throughout the delivery lifecycle. Act as a Subject Matter Expert for Data Protection and Cloud Security , providing technical guidance to architecture, engineering and business teams. Design and govern enterprise data protection and data security controls , including:

Data discovery and inventory Data classification and sensitivity labelling Data Loss Prevention (DLP) Data governance Data retention and disposal Data lifecycle controls Protection of structured and unstructured information Encryption and access controls

Support the secure design and adoption of Microsoft Azure , alongside AWS, SaaS and hybrid-cloud environments. Ensure appropriate security controls across applications, infrastructure, identities, networks and data. Translate cyber risks and regulatory requirements into appropriate security controls and non-functional requirements (NFRs) . Conduct and support security architecture reviews, threat/risk assessments and design validation. Work closely with Enterprise Architecture, Engineering, Cloud, DevSecOps, Risk, Compliance and CISO teams. Identify gaps within the existing security landscape and recommend improvements. Support secure technology adoption and major transformation initiatives.