Senior client-facing security architecture leadership role at a high-assurance cyber security consultancy serving Defence, Government and CNI programmes. The person leads design and assurance of secure architectures, threat modelling and risk assessment, sets standards, and mentors consultants, working with NCSC guidance, cloud, DevSecOps and Zero Trust.
10 years experience in security architecture or closely related disciplines.
Chartered Cyber Security Professional (ChCSP) accreditation in Secure System Architecture and Design - essential.
Active DV clearance and the ability to meet UK residency requirements.
Proven experience leading secure solution architecture across complex, multi-supplier and/or classified programmes.
Strong knowledge of NCSC guidance, Secure by Design, Cyber Assessment Framework (CAF), NIST and ISO 27001.
Experience applying risk-driven security architecture methodologies to complex systems and environments.
Strong understanding of security requirements, threat modelling, risk assessment and security controls.
The ability to communicate complex technical risks and recommendations to both technical and C-level audiences.
Experience leading or mentoring security consultants and assuring technical outputs.
Excellent client-facing, communication and influencing skills.
Existing experience as an NCSC ACSC Head Consultant, Technical Lead or equivalent accountable lead for an assured security architecture capability.
NCSC Certified Cyber Professional (CCP) credentials.
CISSP-ISSAP, SABSA, TOGAF, CISM or relevant engineering chartership.
Security architecture experience across Cloud Security, Identity & Access Management, Zero Trust, DevSecOps, Secure System Integration, Enterprise Architecture and Digital Transformation.
Experience working on nationally significant, high-assurance or classified programmes.
Experience developing security architecture practices, methodologies or reusable consulting assets.
Responsibilities:
Lead the design and assurance of secure architectures across complex Defence, Government, CNI and mission-critical environments.
Define security requirements, threat models, architectural principles and proportionate security controls across the system lifecycle.
Identify and manage security risks across high-level and detailed solution designs, providing practical mitigation strategies for new and legacy environments.
Lead client architecture reviews, design authorities and technical workshops with senior security, technology and programme stakeholders.
Translate complex technical risks into clear, decision-ready recommendations for CISOs, SROs, boards and programme leadership.
Produce high-quality security architecture artefacts, including architecture documentation, risk assessments, design reviews, security requirements and remediation roadmaps.
Set technical standards and assure the quality of security architecture deliverables produced by consultants.
Develop security architecture methodologies, capability and best practice across the wider practice.
Act as the senior technical point of contact for the NCSC Security Architecture offering, providing technical leadership across consultants and client engagements.
Support business development through bids, proposals, client meetings and the development of new security architecture services.
Technologies:
Cloud
DevSecOps
Support
Security
TOGAF
Architect
More:
We are a high-assurance cyber security consultancy operating across Defence, Government, National Security and Critical National Infrastructure. This is a senior, client-facing leadership role based in the UK, with hybrid or remote working and a salary of up to £110,000 as part of a senior consultancy/leadership package. We work on complex, highly regulated and nationally significant programmes, and this role offers the opportunity to take technical ownership of an NCSC-assured Security Architecture capability, influence major programmes, lead and develop other security architecture professionals, and help shape the future direction of our specialist practice.