CISO Solution Architect (9936)

Senior Security Architect (contractor)- Data Protection & Azure Cloud Security

Rate: Flexible

Duration: 1 year

Hybrid working - 8 days onsite per month (Inside of IR35)

We are looking for an experienced Senior Security Architect to join a major enterprise cybersecurity function, taking a leading role in the design and governance of security architecture across Data Protection and Cloud Security .

This is a senior architecture position within a large, complex and highly regulated environment. You will work across business, technology, engineering, risk and security teams to ensure new applications, platforms and cloud solutions are designed securely from the outset.

A major focus of the role will be enterprise data protection and Azure cloud security , including the architecture and governance of controls covering data classification, discovery, labelling, lifecycle management and protection of sensitive information.

Key Responsibilities

• Lead the design and delivery of end-to-end security architecture across enterprise applications, platforms and cloud environments.
• Develop high-level security designs and translate business, technology and risk requirements into practical security architecture.
• Define and maintain security architecture principles, standards, patterns and reusable design guidance .
• Provide architecture governance and design assurance, challenging proposed solutions and ensuring security requirements are addressed throughout the delivery lifecycle.
• Act as a Subject Matter Expert for Data Protection and Cloud Security , providing technical guidance to architecture, engineering and business teams.
• Design and govern enterprise data protection and data security controls , including:
• Data discovery and inventory
• Data classification and sensitivity labelling
• Data Loss Prevention (DLP)
• Data governance
• Data retention and disposal
• Data lifecycle controls
• Protection of structured and unstructured information
• Encryption and access controls
• Support the secure design and adoption of Microsoft Azure , alongside AWS, SaaS and hybrid-cloud environments.
• Ensure appropriate security controls across applications, infrastructure, identities, networks and data.
• Translate cyber risks and regulatory requirements into appropriate security controls and non-functional requirements (NFRs).
• Conduct and support security architecture reviews, threat/risk assessments and design validation.
• Work closely with Enterprise Architecture, Engineering, Cloud, DevSecOps, Risk, Compliance and CISO teams.
• Identify gaps within the existing security landscape and recommend improvements.
• Support secure technology adoption and major transformation initiatives.

Essential Experience

We are looking for candidates with strong experience across both Security Architecture and Data/Cloud Security .

You should have:

• Significant experience as a Security Architect, Cyber Security Architect, Security Solution Architect or Enterprise Security Architect .
• Proven experience delivering end-to-end security architecture within large and complex organisations.
• Strong knowledge of security architecture governance, including standards, patterns, design reviews and architecture assurance .
• Strong Data Protection / Data Security Architecture experience.
• Experience with data classification, discovery, inventory, labelling, governance, retention/disposal and lifecycle controls.
• Understanding of security controls for both structured and unstructured data .
• Strong Microsoft Azure Security architecture experience.
• Good knowledge of AWS, SaaS and hybrid/multi-cloud security.
• Experience securing enterprise applications, infrastructure and cloud platforms.
• Understanding of IAM, Zero Trust, encryption, key management and access-control principles.
• Ability to translate risk assessments and regulatory requirements into technical security architecture.
• Experience working within regulatory frameworks such as GDPR, DORA, PCI-DSS, SOX and/or SWIFT CSP .
• Excellent communication skills with the ability to engage with senior stakeholders, architects, engineers, risk and compliance teams.

Highly Desirable

• Experience with Microsoft Purview , particularly Information Protection, data classification, sensitivity labelling, DLP and information governance .
• Experience defining data‑protection architecture across Azure and Microsoft 365 environments.
• Financial Services, Banking, Payments, Market Infrastructure or other highly regulated/critical infrastructure experience.
• Experience with security architecture frameworks such as SABSA, TOGAF or similar .
• Knowledge of DevSecOps and secure SDLC practices.
• Experience working within Agile delivery environments and across multiple release trains.
• Relevant certifications such as CISSP, CCSP, SABSA, TOGAF, Azure Security/Architecture, CISM or equivalent .

*Rates depend on experience and client requirements

#J-18808-Ljbffr