Cloud Security Associate Architect

Job Description

Cloud Security Associate Architect

As a Cloud Security Associate Architect, you will join Thomson Reuters' Security Architecture team to help embed security across products, platforms, and enterprise systems. You will partner with business and technical teams to promote secure-by-design architectures and secure-by-default configurations that are practical, scalable, and consistent across the organization.

In this role, you will provide technical leadership by collaborating with Information Security, Risk Management, Platform Engineering, Service Management, Commercial Engineering, and Product Engineering teams. You will play a critical role in identifying technology risks, defining security standards, and guiding teams toward secure solutions that align with business objectives while protecting customers and company assets.

Key Responsibilities

• Partner with security, engineering, and business stakeholders to incorporate security requirements into enterprise, cloud, and product architectures.

• Assess emerging technologies, evolving threats, and security risks, translating industry best practices, security frameworks, and regulatory requirements into actionable guidance.

• Define and maintain security standards, reference architectures, secure design patterns, and implementation guardrails for cloud and enterprise environments.

• Establish repeatable security assessment frameworks to help teams identify risks, select appropriate controls, and measure security outcomes.

• Conduct architecture reviews, threat modeling exercises, and security assessments for new applications, cloud services, integrations, migrations, and emerging technologies, including AI and agentic systems.

• Review architectural exceptions, evaluate associated risks, recommend compensating controls, and document design decisions and trade-offs.

• Support the adoption of secure reference implementations across cloud landing zones, shared platforms, and engineering teams to drive standardization and consistency.

• Track security findings, communicate risk-based recommendations, and work with stakeholders to support remediation and implementation efforts.

• Continuously improve security architecture processes, governance models, reference architectures, and security knowledge repositories.

• Act as a trusted technical advisor, building strong relationships across teams while mentoring engineers and contributing to the broader security community.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent practical experience.

• 10+ years of hands-on experience in Security Architecture, Cloud Security, Application Security, Software Engineering, or a related field.

• Strong understanding of cloud platforms, modern application architectures, and enterprise security controls.

• Experience conducting security architecture reviews, threat modeling, risk assessments, and secure design evaluations.

• Knowledge of security frameworks, industry standards, and regulatory requirements.

• Excellent written and verbal communication skills, with the ability to explain complex security concepts to both technical and non-technical audiences.

• Strong analytical and problem-solving skills with the ability to balance security, business, and engineering requirements.

• Demonstrated ability to collaborate effectively across cross-functional teams and influence technical decision-making.

• Passion for cybersecurity and continuous learning, with the ability to quickly evaluate and understand new technologies.

Preferred Qualifications

• Experience designing and securing multi-cloud environments and cloud-native architectures.

• Knowledge of AI/ML security, agentic systems, and emerging technology risk management.

• Experience developing secure reference architectures, security patterns, and governance frameworks.

• Familiarity with DevSecOps practices, secure software development lifecycle (SSDLC), and cloud security tooling.

• Professional security certifications such as CISSP, CCSP, AWS Security Specialty, Azure Security Engineer, or equivalent.

• Experience mentoring engineers, architects, or security professionals.

• Proven track record of driving security initiatives across large-scale enterprise environments.

• Active participation in the cybersecurity community through knowledge sharing, presentations, publications, or mentoring programs.

#LI-HG1