About this role
Salary: £42,000 - 72,500 per year
Requirements
- Current UK Cyber Security Council (UKCSC) professional registration in Security Architecture (Secure System Architecture and Design) at Principal or Chartered level; this is mandatory.
- Significant experience as a hands-on security architect in large, complex, or regulated environments.
- Strong command of secure-by-design principles, architecture assurance, and threat modelling.
- Practical expertise across cloud and hybrid infrastructure, identity and access management (IAM), network security, application security, and data security.
- Excellent written English and the ability to explain technical risk clearly to non-technical stakeholders.
- UK-based and able to attend UK client sites when agreed.
- Able to contract through a limited company or another compliant arrangement.
- Submit a CV and LinkedIn profile, UKCSC registration details (specialism, level, and registration number or public profile link), location and availability, and relevant architecture, assurance, or security qualifications.
- Provide an example of a complex enterprise security architecture you personally designed or assured.
- SABSA, TOGAF, CISSP, CCSP, and/or relevant cloud certifications are desirable but do not replace the UKCSC registration requirement.
Responsibilities
- Lead independent security architecture reviews and assurance engagements for large, complex, or regulated organisations.
- Assess cloud, hybrid, and on-premises architectures across identity, networks, applications, platforms, and data.
- Conduct threat modelling to identify credible attack paths, design weaknesses, and control gaps.
- Evaluate whether proposed controls or alternatives provide equivalent and proportionate protection.
- Review high-level and detailed designs, challenging unsupported assumptions.
- Advise boards, executives, and technical teams on secure-by-design decisions and trade-offs.
- Produce clear, defensible, client-ready findings and assurance reports.
- Complete scheme-specific training and participate in quality reviews when required.
Technologies
- Architect
- Cloud
- IAM
- Network
- Security
- TOGAF
More
We are partnering with an independent UK cyber security advisory and assurance organisation that supports mid-market, enterprise, and regulated clients. We are expanding our associate panel with senior Security Architecture professionals to provide independent architecture assessment, assurance, and board-level advisory on complex environments. This is a contract engagement on an associate, project-by-project basis, based in the UK and predominantly remote, with occasional client-site travel by agreement. Remuneration stated in the advertisement is indicative and depends on the successful candidates experience, skills, and qualifications; final remuneration will be agreed with the successful candidate and subject to the contract terms.
last updated 46 week of 2026