Job Description
This role focuses on defining and maintaining an enterprise-wide cyber security architecture, with particular emphasis on Identity and Access Management (IAM) and Privileged Access Management (PAM). You will shape the current and future security landscape, create and review solution designs, and provide technical direction to ensure that all security solutions align with the organisation's cyber security strategy and roadmap.
Responsibilities
- Define, document and maintain an enterprise-wide view of cyber security architecture, including the current (as-is) state, target state and a clear, phased architecture roadmap.
- Review solution designs from a cyber security perspective and provide technical direction to ensure alignment with the overarching cyber security strategy.
- Create conceptual designs for security solutions based on a strong understanding of business problems and requirements.
- Produce high-level and low-level designs for security solutions in the absence of a dedicated security technical specialist within IT.
- Act in a governance role from a security perspective for projects, ensuring that security requirements and standards are consistently applied.
- Work closely with cyber security teams to determine technology direction and deliver stable, performant platforms that support critical applications and services.
- Define and communicate the architectural roadmap for the cyber security domain, ensuring that business needs are met and investments are directed to the most appropriate technologies.
- Create or contribute to an IAM/PAM strategy and support or lead the implementation of Identity and Access Management solutions, including Identity Governance and Administration (IGA) tools.
- Apply deep technical knowledge across threat intelligence, detection and response, IAM, secrets management and security information and event monitoring across both IT and operational technology environments.
- Operate effectively in an enterprise environment, collaborating with stakeholders across multiple functions and levels.
- Contribute to technology initiatives related to cloud-native application protection (CNAPP), exposure management, external attack management, vulnerability management, threat detection and IAM/PAM.
Essential Skills
- Demonstrable experience defining and maintaining an enterprise-wide cyber security architecture, including as-is, target state and architectural roadmaps.
- Proven experience as a security architect reviewing solution designs and providing technical direction to ensure alignment with a cyber security strategy.
- experience creating conceptual security solution designs based on business requirements.
- experience working at an enterprise level within complex organisational environments.
- experience creating an IAM/PAM strategy and involvement in implementing Identity and Access Management solutions.
- Ability to work on site 2-3 days per week.
- One or more advanced professional certifications in cyber security.
- TOGAF qualification.
Additional Skills & Qualifications
- experience producing high-level designs (HLDs) and low-level designs (LLDs) for security solutions.
- experience acting in a security governance role for project delivery.
- Deep technical knowledge across a broad technology landscape, ideally at expert level, including threat intelligence, detection and response, IAM, secrets management and security information and event monitoring across IT and operational environments.
- Previous experience working in a regulated business environment.
- experience with cloud-native application protection platforms (CNAPP).
- experience with exposure management and cyber attack surface management, including external attack management and vulnerability management.
- experience implementing Identity Governance and Administration (IGA) tools.
Why Work Here?
You will join a technology-driven organisation that is investing in modern cyber security capabilities and architecture. You will have the opportunity to shape strategic security direction, work with advanced tools and platforms, and influence major programmes such as large-scale delivery initiatives. The culture supports collaboration between enterprise architecture and security teams, providing a platform to share expertise, develop professionally and contribute to meaningful, long-term security improvements.
Work Environment
The role is based in a modern enterprise environment, with an expectation of being on site 2-3 days per week and working flexibly for the remainder. You will collaborate closely with cyber security and architecture teams, engaging with technologies that support threat intelligence, detection and response, IAM, PAM, secrets management, security information and event monitoring, cloud-native application protection, exposure management and vulnerability management. The environment combines both IT and operational technology contexts, offering exposure to critical platforms and services. Dress code and day-to-day working practices are aligned with a professional office setting.