CISO Solution Architect (9936)
Salt
London
Job type
contract
Location
London, England
Senior Security Architect (contractor)- Data Protection & Azure Cloud Security
Rate: Flexible
Duration: 1 year
Hybrid working - 8 days onsite per month (Inside of IR35)
We are looking for an experienced
Senior Security Architect
to join a major enterprise cybersecurity function, taking a leading role in the design and governance of security architecture across
Data Protection and Cloud Security . This is a senior architecture position within a large, complex and highly regulated environment. You will work across business, technology, engineering, risk and security teams to ensure new applications, platforms and cloud solutions are designed securely from the outset. A major focus of the role will be
enterprise data protection and Azure cloud security , including the architecture and governance of controls covering data classification, discovery, labelling, lifecycle management and protection of sensitive information. Key Responsibilities Lead the design and delivery of
end-to-end security architecture
across enterprise applications, platforms and cloud environments. Develop high-level security designs and translate business, technology and risk requirements into practical security architecture. Define and maintain
security architecture principles, standards, patterns and reusable design guidance . Provide architecture governance and design assurance, challenging proposed solutions and ensuring security requirements are addressed throughout the delivery lifecycle. Act as a
Subject Matter Expert for Data Protection and Cloud Security , providing technical guidance to architecture, engineering and business teams. Design and govern enterprise
data protection and data security controls , including: Data discovery and inventory Data classification and sensitivity labelling Data Loss Prevention (DLP) Data governance Data retention and disposal Data lifecycle controls Protection of structured and unstructured information Encryption and access controls Support the secure design and adoption of
Microsoft Azure , alongside AWS, SaaS and hybrid-cloud environments. Ensure appropriate security controls across applications, infrastructure, identities, networks and data. Translate cyber risks and regulatory requirements into appropriate
security controls and non-functional requirements (NFRs) . Conduct and support security architecture reviews, threat/risk assessments and design validation. Work closely with Enterprise Architecture, Engineering, Cloud, DevSecOps, Risk, Compliance and CISO teams. Identify gaps within the existing security landscape and recommend improvements. Support secure technology adoption and major transformation initiatives. Essential Experience We are looking for candidates with strong experience across
both Security Architecture and Data/Cloud Security . You should have: Significant experience as a
Security Architect, Cyber Security Architect, Security Solution Architect or Enterprise Security Architect . Proven experience delivering
end-to-end security architecture
within large and complex organisations. Strong knowledge of security architecture governance, including
standards, patterns, design reviews and architecture assurance . Strong
Data Protection / Data Security Architecture
experience. Experience with data classification, discovery, inventory, labelling, governance, retention/disposal and lifecycle controls. Understanding of security controls for both
structured and unstructured data . Strong
Microsoft Azure Security
architecture experience. Good knowledge of AWS, SaaS and hybrid/multi-cloud security. Experience securing enterprise applications, infrastructure and cloud platforms. Understanding of IAM, Zero Trust, encryption, key management and access-control principles. Ability to translate risk assessments and regulatory requirements into technical security architecture. Experience working within regulatory frameworks such as
GDPR, DORA, PCI-DSS, SOX and/or SWIFT CSP . Excellent communication skills with the ability to engage with senior stakeholders, architects, engineers, risk and compliance teams. Highly Desirable Experience with
Microsoft Purview , particularly Information Protection, data classification, sensitivity labelling, DLP and information governance. Experience defining data-protection architecture across Azure and Microsoft 365 environments. Financial Services, Banking, Payments, Market Infrastructure or other highly regulated/critical infrastructure experience. Experience with security architecture frameworks such as
SABSA, TOGAF or similar . Knowledge of DevSecOps and secure SDLC practices. Experience working within Agile delivery environments and across multiple release trains. Relevant certifications such as
CISSP, CCSP, SABSA, TOGAF, Azure Security/Architecture, CISM or equivalent . *Rates depend on experience and client requirements
TPBN1_UKTJ
← Back to job search
Senior Security Architect
to join a major enterprise cybersecurity function, taking a leading role in the design and governance of security architecture across
Data Protection and Cloud Security . This is a senior architecture position within a large, complex and highly regulated environment. You will work across business, technology, engineering, risk and security teams to ensure new applications, platforms and cloud solutions are designed securely from the outset. A major focus of the role will be
enterprise data protection and Azure cloud security , including the architecture and governance of controls covering data classification, discovery, labelling, lifecycle management and protection of sensitive information. Key Responsibilities Lead the design and delivery of
end-to-end security architecture
across enterprise applications, platforms and cloud environments. Develop high-level security designs and translate business, technology and risk requirements into practical security architecture. Define and maintain
security architecture principles, standards, patterns and reusable design guidance . Provide architecture governance and design assurance, challenging proposed solutions and ensuring security requirements are addressed throughout the delivery lifecycle. Act as a
Subject Matter Expert for Data Protection and Cloud Security , providing technical guidance to architecture, engineering and business teams. Design and govern enterprise
data protection and data security controls , including: Data discovery and inventory Data classification and sensitivity labelling Data Loss Prevention (DLP) Data governance Data retention and disposal Data lifecycle controls Protection of structured and unstructured information Encryption and access controls Support the secure design and adoption of
Microsoft Azure , alongside AWS, SaaS and hybrid-cloud environments. Ensure appropriate security controls across applications, infrastructure, identities, networks and data. Translate cyber risks and regulatory requirements into appropriate
security controls and non-functional requirements (NFRs) . Conduct and support security architecture reviews, threat/risk assessments and design validation. Work closely with Enterprise Architecture, Engineering, Cloud, DevSecOps, Risk, Compliance and CISO teams. Identify gaps within the existing security landscape and recommend improvements. Support secure technology adoption and major transformation initiatives. Essential Experience We are looking for candidates with strong experience across
both Security Architecture and Data/Cloud Security . You should have: Significant experience as a
Security Architect, Cyber Security Architect, Security Solution Architect or Enterprise Security Architect . Proven experience delivering
end-to-end security architecture
within large and complex organisations. Strong knowledge of security architecture governance, including
standards, patterns, design reviews and architecture assurance . Strong
Data Protection / Data Security Architecture
experience. Experience with data classification, discovery, inventory, labelling, governance, retention/disposal and lifecycle controls. Understanding of security controls for both
structured and unstructured data . Strong
Microsoft Azure Security
architecture experience. Good knowledge of AWS, SaaS and hybrid/multi-cloud security. Experience securing enterprise applications, infrastructure and cloud platforms. Understanding of IAM, Zero Trust, encryption, key management and access-control principles. Ability to translate risk assessments and regulatory requirements into technical security architecture. Experience working within regulatory frameworks such as
GDPR, DORA, PCI-DSS, SOX and/or SWIFT CSP . Excellent communication skills with the ability to engage with senior stakeholders, architects, engineers, risk and compliance teams. Highly Desirable Experience with
Microsoft Purview , particularly Information Protection, data classification, sensitivity labelling, DLP and information governance. Experience defining data-protection architecture across Azure and Microsoft 365 environments. Financial Services, Banking, Payments, Market Infrastructure or other highly regulated/critical infrastructure experience. Experience with security architecture frameworks such as
SABSA, TOGAF or similar . Knowledge of DevSecOps and secure SDLC practices. Experience working within Agile delivery environments and across multiple release trains. Relevant certifications such as
CISSP, CCSP, SABSA, TOGAF, Azure Security/Architecture, CISM or equivalent . *Rates depend on experience and client requirements
TPBN1_UKTJ