Overview
This role of Security Architect entails engaging with a diverse technology function to lead and enhance security frameworks over an initial six-month contract. The contractor will serve as the senior design authority for security and operational controls, ensuring their integration within a complex technological landscape. Working in a hybrid setting, the position requires collaboration with senior stakeholders and suppliers to uphold and advance security measures.
Responsibilities
- Own and evolve security reference architectures and minimum control baselines.
- Lead threat modelling for identities, APIs, workloads, data, messaging, and supplier access.
- Define models for monitoring, detection, triage, escalation, and containment.
- Shape operational readiness including observability, resilience, recovery, and service ownership.
- Assure production readiness and challenge suppliers on controls and evidence.
- Contribute to incident command structures and recovery architecture.
- Drive continual improvement through evidence reviews and post-incident learning.
Requirements
- Significant experience as a Security Architect or Security Operations Architect.
- Deep knowledge of modern security controls including identity, privileged access, and network security.
- Practical experience with SIEM, XDR, MDR, and incident response processes.
- Strong understanding of service management, observability, and operational recovery.
- Experience in Azure architecture and operations, including Entra ID and cloud security services.
- Proven ability to operate as a design authority in multi-party environments.
- Clear and structured communication skills with senior stakeholders.