Salary: £31,500 - 59,500 per year
Requirements: - 15+ years in cybersecurity, with time spent in both hands-on technical roles and broader strategic ones.
- T- or U-shaped: genuine depth in at least one domain (cloud security, IAM, SOC, or similar) and enough breadth to hold a conversation across the full landscape.
- Experienced in designing and delivering security architecture inside large, complex organisations, not just advising on it.
- Comfortable running client workshops, presenting to boards, and writing for executive audiences.
- Able to discuss security strategy directly with a CIO or CISO, including operating model, risk appetite, and programme design, not just technical architecture.
- Experience outside pure architecture: operating model design, capability building, cyber programme definition, or security governance.
- Works well in ambiguous situations and can bring structure to a client problem that has none.
- Familiar with the major frameworks (NIST CSF, ISO 27001, SABSA, MITRE ATT&CK, NIS2) and able to apply them selectively rather than wholesale.
- Cloud platform experience across at least two of Azure, AWS, and GCP, including hybrid architectures.
- Able to translate a technical vulnerability into a financial or operational risk statement that a CFO or board would act on.
- Experienced in scoping and structuring security engagements, including managing scope, stakeholders, and delivery risk.
- Communicates clearly with both technical architects and non-technical executives, adjusting without losing accuracy.
- Threat modelling experience using structured methods such as STRIDE, applied to complex hybrid ecosystems before deployment.
- Experience working with legacy technical debt in practice: modernising authentication protocols, managing PKI lifecycles, and retrofitting security controls into environments not originally designed with security in mind.
- Practical knowledge across some combination of: security governance and policy; cyber risk assessment; enterprise security programme design; and secure SDLC.
- Working knowledge of at least two cybersecurity frameworks: NIST CSF, NIST SP 800-53, ISO/IEC 27000 series, C2M2, or Cloud Security Alliance CCM.
- Familiarity with AI platform security, cloud and data security risks, and third-party/supply chain risk.
- Hands-on or advisory experience across IAM/PAM, vulnerability management, incident response, SIEM, and business continuity.
- Cloud landing zone design and segmentation: able to limit blast radius from a security incident through architecture choices, not just tooling.
- Data security: experience with DLP, data classification, and cryptographic controls across hybrid environments.
- Logging and observability: clear understanding of what good telemetry looks like from a security operations perspective, and able to design architectures to produce it.
- Able to speak to AI and automation in a security context, including where GenAI introduces new risk and how to address it architecturally.
- Nice to have: prior consulting experience in an architecture leadership role.
- Nice to have: experience building security frameworks or reference architectures that a team can reuse.
- Nice to have: experience writing proposals, leading pitches, or contributing to winning new security work.
- Nice to have: experience managing or mentoring junior cyber staff in a professional services environment.
- Nice to have: DevSecOps experience, including implementing security gates (SAST/DAST) into CI/CD pipelines.
- Nice to have: infrastructure as Code (Terraform, Bicep) and scripting (PowerShell, Python) for security automation.
Responsibilities: - Own cybersecurity architecture workstreams within large client transformation programmes.
- Design and deliver security architectures across cloud, hybrid, OT, and legacy environments.
- Work directly with CISO, CIO, and programme sponsors to shape security strategy and earn their confidence as a technical peer.
- Sit on the project leadership team and represent security across business and technology workstreams.
- Manage and direct teams of architects and consultants day-to-day.
- Produce as-is/to-be security architecture documentation, risk assessments, and migration artefacts.
- Identify client opportunities, develop security-focused points of view, and support account expansion.
- Understand what clients are wrestling with, technically and commercially, so that architectural recommendations land in context.
- Run multi-million security transformation programmes independently, from scoping through to delivery.
- Coach and develop more junior architects and consultants on the team.
- Stay current on the vendor landscape and bring that knowledge back to shape our security offerings.
- Review security architectures and vendor proposals on behalf of clients, stress-testing assumptions and providing an independent view.
Technologies: - AI
- AWS
- Architect
- Azure
- CI/CD
- Cloud
- DevSecOps
- GCP
- IAM
- Support
- PowerShell
- Python
- Security
- Terraform
More:
We are a consistently recognized top-ranked consulting firm and one of the worlds best places to work, with a strong focus on exceptional talent, inclusion, and an environment where every individual can thrive professionally and personally. You will join the Architect experts within our Enterprise Technology team, part of our digital capabilities practice, where we help clients modernise their security strategy, architecture, and programmes. This is a permanent full-time role based in London, and applications must be submitted no later than 30 August 2026.
last updated 36 week of 2026