Information Security Architect

Are you an experienced Security Architect who enjoys shaping secure, scalable solutions that make a real business impact?

At Howdens, we’re looking for a Security Architect to play a key role in embedding security across our systems, projects, and technology landscape. This is an exciting opportunity to influence secure design decisions across infrastructure, cloud, and application projects, while helping us deliver resilient, compliant, and future-focused digital solutions.

You’ll work closely with technical teams, the PMO, Enterprise Architecture, Cyber teams, and external suppliers to ensure security is built into everything we do, from solution design and procurement through to implementation and operational handover.

What you’ll be doing

Designing and delivering security solutions that support Howdens’ business goals and cyber risk strategy. Providing security architecture input across infrastructure, cloud, and application projects. Working with stakeholders to balance business needs, technical constraints, and security requirements. Leading and supporting solution design and re-architecture initiatives to ensure solutions are secure, maintainable, and scalable. Carrying out security architecture reviews of new and existing systems to identify risks and drive continuous improvement. Supporting the evaluation and procurement of security technologies, ensuring they align with Howdens’ standards and architecture principles. Working closely with Cyber SMEs and Enterprise Architecture to support a consistent, joined-up approach to security across IT. Helping to promote Information Security best practice and support compliance with security policy.

What we need from you

We’re looking for someone with strong Information Security experience and a clear architecture focus. You’ll need to be confident working across technical teams, influencing stakeholders, and turning security requirements into practical, effective solutions.

You’ll also bring:

Strong knowledge of lateral movement risks, network segmentation, and endpoint security. Experience working with Windows and Linux operating systems. A good understanding of protocol analysis, network architecture, and infrastructure design. Experience leading solutions through the full lifecycle, from architecture and design through to engineering, deployment, operational handover, and support. A recognised Cyber Security qualification such as CISSP, CISM, or equivalent. Knowledge of frameworks such as ISO27001, PCI DSS, and Zero Trust. Strong communication skills with the ability to influence colleagues at all levels. The ability to work with third-party suppliers and support change across a fast-paced environment. Experience in presentation or training techniques within IT Security would be beneficial.