Chief Security Architect

Salary: £37,000 - 68,500 per year

Requirements:

• 10 years experience in security architecture or closely related disciplines.
• Chartered Cyber Security Professional (ChCSP) accreditation in Secure System Architecture and Design - essential.
• Active DV clearance and the ability to meet UK residency requirements.
• Proven experience leading secure solution architecture across complex, multi-supplier and/or classified programmes.
• Strong knowledge of NCSC guidance, Secure by Design, Cyber Assessment Framework (CAF), NIST and ISO 27001.
• Experience applying risk-driven security architecture methodologies to complex systems and environments.
• Strong understanding of security requirements, threat modelling, risk assessment and security controls.
• The ability to communicate complex technical risks and recommendations to both technical and C-level audiences.
• Experience leading or mentoring security consultants and assuring technical outputs.
• Excellent client-facing, communication and influencing skills.
• Existing experience as an NCSC ACSC Head Consultant, Technical Lead or equivalent accountable lead for an assured security architecture capability.
• NCSC Certified Cyber Professional (CCP) credentials.
• CISSP-ISSAP, SABSA, TOGAF, CISM or relevant engineering chartership.
• Security architecture experience across Cloud Security, Identity & Access Management, Zero Trust, DevSecOps, Secure System Integration, Enterprise Architecture and Digital Transformation.
• Experience working on nationally significant, high-assurance or classified programmes.
• Experience developing security architecture practices, methodologies or reusable consulting assets.

Responsibilities:

• Lead the design and assurance of secure architectures across complex Defence, Government, CNI and mission-critical environments.
• Define security requirements, threat models, architectural principles and proportionate security controls across the system lifecycle.
• Identify and manage security risks across high-level and detailed solution designs, providing practical mitigation strategies for new and legacy environments.
• Lead client architecture reviews, design authorities and technical workshops with senior security, technology and programme stakeholders.
• Translate complex technical risks into clear, decision-ready recommendations for CISOs, SROs, boards and programme leadership.
• Produce high-quality security architecture artefacts, including architecture documentation, risk assessments, design reviews, security requirements and remediation roadmaps.
• Set technical standards and assure the quality of security architecture deliverables produced by consultants.
• Develop security architecture methodologies, capability and best practice across the wider practice.
• Act as the senior technical point of contact for the NCSC Security Architecture offering, providing technical leadership across consultants and client engagements.
• Support business development through bids, proposals, client meetings and the development of new security architecture services.

Technologies:

• Cloud
• DevSecOps
• Support
• Security
• TOGAF
• Architect

More:

We are a high-assurance cyber security consultancy operating across Defence, Government, National Security and Critical National Infrastructure. This is a senior, client-facing leadership role based in the UK, with hybrid or remote working and a salary of up to £110,000 as part of a senior consultancy/leadership package. We work on complex, highly regulated and nationally significant programmes, and this role offers the opportunity to take technical ownership of an NCSC-assured Security Architecture capability, influence major programmes, lead and develop other security architecture professionals, and help shape the future direction of our specialist practice.

last updated 39 week of 2026