Security Technical Lead/ Application Security Architect

We're Hiring: Security Technical Lead - Application & Cloud Security Architect

Location: Sheffield, UK

Work Model: Hybrid ( 3 days in the office)

Contract: 5 months (Jan 2027 - May 2027)

My client, a leading global financial institution, is seeking a Security Technical Lead / Application & Cloud Security Architect to partner with core Global Finance & Technology (GFT) domains (Risk, Finance, Treasury, Corporate Functions). Ideal for senior architects with deep expertise in cloud security, risk management, and application security in regulated banking environments.

Key Responsibilities:

• Act as the senior cybersecurity partner for GFT domains, advising leadership and delivery teams on material cyber risks, control expectations, and risk-based trade-offs.
• Own and drive the domain risk register, ensuring risks are clearly articulated (cause-event-impact) with timebound remediation plans.
• Embed proportionate security-by-design across change delivery, solution designs, and acceptance criteria.
• Strengthen in-service security posture across identity & access risk (including PAM), threat & vulnerability management, logging/monitoring, and configuration weaknesses.
• Oversee supplier and SaaS cyber risk for onboarding and renewals, driving mitigations for access, data protection, and resilience.
• Lead control governance, thematic reviews, and audit readiness, ensuring timely closure of findings.
• Provide cybersecurity leadership support during major incidents, translating technical exposures into executive business impacts (financial reporting, payroll, liquidity).

Skills & Experience Required:

• Significant cybersecurity and technical risk management experience within a regulated Financial Services or Tier-1 Banking environment.
• Advanced expertise in Cloud Security Architecture (P3 - Advanced) and Application Security Architecture.
• Strong capability in cyber risk articulation (Cause-Event-Impact), issue management, control mapping, and audit engagement.
• Solid technical foundation across IAM/PAM, vulnerability management, SIEM/logging, SaaS/third-party risk, and AI security.
• Fluent English with excellent written and verbal communication skills, confident in chairing governance forums and challenging constructively.
• Must have UK Right to Work and be able to attend the Sheffield office 3 days per week.

Desirable Qualifications:

• Industry certifications such as CISSP, CISM, CRISC, CISA, ISO27001, or CEH.
• Direct experience supporting technology for Finance, Treasury, or Risk domains with sensitivity to financial controls and regulatory reporting.
• Familiarity with operational resilience and technology risk expectations within financial services.

If you have a strong Financial Services cybersecurity background and are looking for your next contract opportunity, apply to this advert or share your cv to

Randstad Technologies is acting as an Employment Business in relation to this vacancy.