Cyber Security Architect - Data Engineering, Analytics & AI - Telecoms

Summary: The Cyber Security Architect will lead the design and governance of security architectures for enterprise-level Data Engineering, Analytics, and AI platforms. This role involves collaborating with various teams to ensure security is integrated throughout the technology lifecycle, focusing on resilient and compliant solutions. The architect will also be responsible for developing security standards and conducting architecture reviews to protect critical data assets. The position requires a strong understanding of security frameworks and the ability to communicate complex concepts effectively to stakeholders.

Key Responsibilities:

• Develop high-level and low-level security architectures for enterprise data platforms, analytics environments, AI/ML solutions, cloud-native applications and supporting IT infrastructure.
• Define and implement security architecture standards, reference models and design patterns covering cloud services, data platforms, APIs, AI workloads, containerised environments and enterprise applications.
• Conduct architecture reviews, security design assurance, threat modelling (STRIDE), risk assessments and technical control evaluations for new and existing business solutions.
• Design secure data ingestion, processing, transformation and storage architectures across modern data platforms including data lakes, data warehouses and Real Time streaming environments.
• Provide security architecture guidance throughout project delivery, ensuring secure integration between cloud platforms, enterprise applications, third-party services and AI technologies.
• Collaborate with Data Engineering, Analytics, DevOps, Platform Engineering and AI teams to embed Secure SDLC, DevSecOps practices and automated security controls within CI/CD pipelines.
• Define security requirements for AI and machine learning solutions, including data protection, model security, identity controls, secure APIs, monitoring and governance of AI services.
• Support enterprise security programmes by ensuring solutions align with Zero Trust principles, ISO 27001, NIST Cyber Security Framework, CIS Controls, GDPR and industry best practices.
• Produce architecture documentation including High-Level Designs (HLDs), Low-Level Designs (LLDs), security standards, reference architectures and technical governance documentation.
• Present security architecture recommendations, technology roadmaps and risk mitigation strategies to technical leadership, project stakeholders and executive management.

Key Skills:

• Enterprise Security Architecture across cloud, data engineering, analytics and AI platforms.
• Security architecture and control design covering infrastructure, applications, cloud services, data platforms and AI environments.
• Threat modelling, architecture risk assessments, security assurance and secure solution design.
• Cloud security architecture across Azure, AWS and hybrid environments.
• Data platform security including encryption, tokenisation, data classification, data governance and secure data lifecycle management.
• Identity and Access Management (IAM), Privileged Access Management (PAM), Zero Trust Architecture and Microsoft Entra ID.
• Endpoint security architecture, Microsoft Defender, EDR/XDR strategy, telemetry collection and detection engineering.
• SIEM, SOC integration, security monitoring, telemetry architecture and automated incident response using Microsoft Sentinel, QRadar and Splunk.
• Vulnerability management, remediation governance, attack surface reduction and secure configuration management.
• Secure API design, container security, Kubernetes security and cloud-native application protection.
• DevSecOps integration including SAST, DAST, IaC security, pipeline governance and automated security testing.
• Security architecture for AI services, machine learning workloads, generative AI platforms and responsible AI governance.
• Enterprise data protection technologies including Microsoft Purview, DLP, information classification, data discovery and regulatory compliance.
• Security governance, technology risk management and regulatory compliance aligned with ISO 27001, NIST, Cyber Essentials Plus, PCI DSS and GDPR.

Salary (Rate): £375 per day

City: Reading

Country: UK

Working Arrangements: undetermined

IR35 Status: outside IR35

Seniority Level: undetermined

Industry: IT