Security Architect (Enterprise Security - Microsoft)

Security Architect

Location: Hybrid working - City of London (40% office attendance)

Sector: International Law Firm

Salary: Up to £110,000 salary + benefits and bonus.

An international law firm is seeking an experienced Security Architect to lead and evolve its enterprise security architecture strategy. This is a senior leadership role within the Technology function, acting as the principal technical authority for cyber security across cloud, on-premises and hybrid environments. The successful candidate will shape security standards, architecture patterns and governance frameworks, ensuring technology solutions are secure, compliant and aligned with business objectives. The role will work closely with senior stakeholders, including Technology, Information Security, Risk, Compliance and Legal teams, while also playing a key role in the organisation's approach to AI security and data protection.

Key Responsibilities

Own and develop the enterprise security architecture strategy and roadmap. Provide expert guidance on cyber security, Zero Trust and SASE architectures. Define security standards, principles and architectural patterns across the technology estate. Establish governance and security frameworks for the safe adoption of AI technologies. Ensure security-by-design principles are embedded across all new solutions and platforms. Advise on identity and access management, encryption, data residency and cloud security. Align architectural decisions with frameworks and regulations including ISO 27001, NIST, CIS, GDPR and NIS2. Support client audits, security assessments and regulatory enquiries. Evaluate and recommend security technologies, vendors and strategic solutions. Produce and maintain high-level security architecture artefacts, standards and design documentation. Skills & Experience Proven experience as a Security Architect within a law firm or legal services environment. Strong expertise across enterprise security architecture, cloud security and hybrid infrastructures. Experience designing and implementing Zero Trust and SASE frameworks. Deep understanding of identity management, network security, segmentation, encryption and threat protection technologies. Experience with Azure cloud services and enterprise-scale architecture design. Knowledge of AI security risks, governance and secure adoption practices. Strong understanding of ISO 27001, NIST, GDPR, NIS2 and related compliance frameworks. Excellent stakeholder management and communication skills, with the ability to influence at executive level. Qualifications Degree in Computer Science or a related discipline, or equivalent experience. CISSP certification essential; CISM and SABSA desirable. TOGAF certified (version 9 or above preferred). This is an excellent opportunity to join a highly regarded international law firm and play a pivotal role in shaping and securing its global technology landscape