Security Architect

Salary: £63,000 - 103,000 per year

Requirements:

• Awareness and understanding of industry security frameworks and guidance such as NIST CSF, NIST 800-53, NCSC CAF and other NCSC guidelines
• Good knowledge of networking, including switching, routing and firewalls
• Awareness or limited experience with the design concepts associated with adoption of cloud platforms such as AWS and/or Microsoft Azure
• Understanding of the native security capabilities and some practice within cloud platforms such as AWS and/or Microsoft Azure
• Understanding of modern security concepts, common attack vectors, malware, security analytics and threat intelligence
• Understanding of security testing and vulnerability management, including pen testing/ITHC and CVSS/CVE
• Some experience working with security standards such as ISO 27001, 27002, 27017 and 27108
• Minimum of 5 years of experience in cyber security
• One of the certifications CISSP, CISM, CCSP, CRISC or equivalent experience
• Good knowledge covering at least 2 of the following: AD, Cryptography, End User Computing, IAM, PKI, Server hardening, SIEM, SOAR, virtualization (VMware)
• Strong teamwork skills and attention to detail
• Excellent written and verbal communication skills
• Self-motivation and ability to take responsibility
• Persuasive communicator, using logic to win support and change views
• Candidates must hold or be able to gain UK SC level Security Clearance or higher
• British Nationals only, with dual nationality to be flagged during the recruitment process

Responsibilities:

• Contribute to the design, implementation and ongoing development of the security architecture of the clients IT systems
• Identify business objectives, user needs, risk appetite and cyber security obligations
• Identify vulnerabilities, perform threat modelling, undertake risk assessment and evaluate the effectiveness of security controls
• Verify and evidence alignment to Secure by Design principles, corporate security policy and standards, as well as industry recognised frameworks and best practice
• Contribute to deliver and continually enhance a coherent approach to the design of secure client end-to-end solutions
• Contribute to secure conceptual, logical and high-level designs by identifying appropriate security controls to be embedded in solutions that meet business requirements and target risk appetite
• Contribute to the design and articulate and justify design recommendations at security architecture assurance gates
• Contribute to design documentation, options papers, risk assessments and stakeholder presentations, and communicate these to senior technical and non-technical stakeholders
• Contribute to reference architecture of established patterns, principles and guidelines
• Contribute to the development of the Security Practice skills and capabilities to ensure consistent high quality of service delivery and expertise
• Coach and mentor junior members of the team
• Contribute to the development of collateral to support Security Consulting go-to-market propositions and service offerings
• Contribute to the development and presentation of client proposals collaborating with teams across our business
• Contribute to documented Information Security Management Plans incorporating regulatory, legal and compliance requirements in relation to applicable security policies, standards and guidelines
• Contribute to the identification of risks and emerging cyber security vulnerabilities and threats, and analyse them to quantify and lead risk mitigation plans
• Work with Service Management to ensure that partners and suppliers adhere to agreed standards and policies, and verify compliance and security KPIs
• Work closely with 1st, 2nd and 3rd lines of defence on matters relating to cyber security, information assurance, cyber risk, data privacy and regulatory/compliance considerations
• Contribute to the development and enhancement of governance, risk and compliance aligned to policy, standards and industry good practice
• Ensure continuous assessment, identification, analysis and reporting of useful metrics to enable informed risk-based decisions
• Constructively challenge established processes and controls to identify, recommend and facilitate continuous improvement
• Review and verify that documentation relating to process and technical security controls are maintained
• Develop secure systems without close supervision
• Contribute to security requirements for new systems or changes to existing systems without close supervision
• Execute technical management tasks in respect of ongoing client projects

Technologies:

• AI
• AWS
• Azure
• Cloud
• Cryptography
• Embedded
• IAM
• Support
• Security
• VMware
• Architect
• Network

More:

We are NTT DATA, a global business and technology services, AI and digital infrastructure leader with endless opportunities to think big, act bold and take ownership. We co-innovate with clients and partners globally for business and societal impact, serving 75% of the Fortune Global 100 with experts in over 70 countries. We encourage experimentation, recognize great work, and are a Global Top Employer and part of NTT Group, which invests over $3 billion annually in R&D. We offer tailored benefits that support physical, emotional and financial wellbeing, continuous learning and development opportunities, and flexible work options. We are an equal opportunities employer and a proud Disability Confident Committed Employer, committed to a diverse and inclusive workforce.

last updated 36 week of 2026