- Job Id: LS123
- Experience:0-1 Years
Life Sciences (nice to have, not required)
Job Descriptions:
Our client is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the USA and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.
The Cyber Security Enterprise Architect is a senior, client facing cyber authority responsible for shaping, positioning and assuring large scale cyber security transformation initiatives for complex, regulated organizations.
The role exists to establish executive trust, translate cyber risk and regulatory pressure into pragmatic transformation programs, and ensure that proposed cyber solutions are strategically sound, commercially viable, and operationally deliverable.
This is not a product sales or vendor led engineering role.
It is a senior advisory and architecture position for an individual who combines deep cyber security expertise, regulatory fluency, and real world delivery experience, with strategic understanding of modern identity centric security, SOC led defense models, cloud native architectures, and the long term security implications of emerging technologies such as Artificial Intelligence and post quantum cryptography.
Job Responsibilities:
Key Responsibilities
1. Executive Advisory & Trust Leadership
- Engage CIOs, CISOs, COOs, Risk Committees and Boards as a trusted cyber authority
- Lead executive‑level conversations on cyber resilience, Zero Trust, cloud security, data protection, OT/ICS security and organizational cyber maturity
- Translate regulatory requirements and supervisory expectations into pragmatic, prioritized cyber roadmaps
- Own the cyber narrative in major pursuits, client workshops and early‑stage engagements
2. Security Architecture & Solution Design
Design and shape enterprise‑scale cyber architectures and operating models across:
- Identity & Access Management (IAM):
- Identity‑centric Zero Trust architectures, IAM, PAM, CIAM and workforce identity at enterprise scale
- Cyber Defense & SOC:
- SOC design and modernization, SIEM/XDR platforms, threat detection and response, security automation and AI‑augmented security operations
- Cloud & Platform Security:
- Secure‑by‑design security architectures for AWS, Azure and GCP within hybrid and multi‑cloud enterprise environments
- Data, AI & Advanced Technology Security:
- Data protection, privacy engineering, AI security, governance, model risk management and control frameworks
- OT / Critical Infrastructure Security:
- Secure convergence of IT and OT environments and cyber resilience of operational and safety‑critical systems
Key architectural outputs include:
- Target operating models
- Security roadmaps and multi‑year transformation plans
- Enterprise and domain‑level architecture blueprints
- Control frameworks aligned to regulatory and sector requirements
3. Regulatory & Compliance Leadership
- Demonstrate strong working knowledge of recognized frameworks and standards, including:
- NIST CSF / NIST 800‑53
- ISO/IEC 27001
- Sector‑specific frameworks (e.g. NHS DSPT, NERC CIP / IEC 62443, GxP/FDA, FCA/PRA expectations)
- Translate regulatory controls into practical, operational security capabilities rather than policy‑only compliance
- Consider the impact of AI‑driven systems and evolving cryptographic standards on regulatory compliance and long‑term control sustainability
4. Deal Shaping & Commercial Support
- Act as the lead cyber authority on complex bids, managed services, and transformation programs
- Define solution scope, delivery models and commercially viable security architectures
- Shape risk‑based investment cases and cyber business cases aligned to executive priorities
- Support RFP/RFI responses and executive‑level presentations
5. Delivery Realism & Governance
- Ensure that cyber solutions proposed during sales and early engagement are:
- Technically implementable
- Secure by design
- Compliant by default
- Act as a bridge between sales, engineering, delivery, and governance / risk teams
- Provide architectural oversight to ensure continuity between what is sold and what is delivered
Qualifications:
- 13–20+ years’ experience in cyber security or enterprise security architecture
- Background in one or more of the following roles:
- Security Architect
- Head of Security Architecture
- CISO or Deputy CISO
- Principal Cyber Consultant
- Deep experience working within regulated industries
- Proven involvement in large scale cyber transformation programs (beyond point solutions or tooling)
- Board level communication and executive engagement capability
- Real world experience of major incidents and breach scenarios