Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead security architecture for renewable energy projects, ensuring secure designs and compliance.
- Company: NextEnergy Group drives the transition to clean energy through solar and battery storage solutions across Europe.
- Benefits: Enjoy hybrid working, 30 days holiday, private healthcare, and a supportive team environment.
- Why this job: Join a mission-driven company focused on sustainability and innovation in the energy sector.
- Qualifications: 5+ years in security architecture, with expertise in renewable energy and Azure security services.
- Other info: Flexible work culture with opportunities for professional growth and international exposure.
The predicted salary is between 43200 - 72000 £ per year.
NextEnergy Group develops, builds, and operates large-scale solar Photovoltaic (PV) assets and battery storage projects across Europe. As our Security & Information Security Architect, you will set the security vision and implement secure-by-design principles for every layer of the organization — from field-level Operational Technology networks and real-time trading engines right through to corporate business systems.
A critical dimension of the role will be tight collaboration with:
- Data Protection Officer (DPO): embedding privacy-by-design, supporting DPIAs and audits
- Network & Security Engineering team: turning architecture patterns into robust, monitored, and recoverable configurations in production
- External security advisors & key technology suppliers: to align architectural controls with best practice guidance, managed service deliverables, and secure software supply chain requirements
This is a strategic yet hands-on role that balances secure-by-design principles with practical delivery across cloud, on-prem, and SaaS estates.
KEY RESPONSIBILITIES
- Set & evolve enterprise security architecture (reference models, standards, patterns) covering IT, OT and hybrid-cloud environments that collect, process and trade renewable-generation data
- Embed security & privacy requirements into solution designs, CI/CD pipelines and infrastructure as code, working closely with product squads and the DPO
- Drive threat-modelling, technical risk assessments, and STRIDE/PASTA analyses for new solar-plant builds, grid integration projects and SaaS platforms
- Act as lead architect on secure network topologies (IT/OT segmentation, zero-trust, IEC 62443 zones) in partnership with Network & Security Engineers
- Define IAM, encryption-at-rest/in-transit, secrets management and key-management standards aligned with ISO 27001/27019 and NIS2
- Review and select third-party security solutions; lead due diligence with EPC, O&M and SCADA vendors
- Serve as technical SME for compliance frameworks (ISO 27001, NIST CSF, GDPR, IEC 62443, CIS Controls)
- Collaborate with the DPO on data flow mapping, impact assessments (DPIA), breach notification readiness and audit responses
- Track emerging threats to the energy sector (e.g., TSO/DSO interface risks, supply chain attacks on inverters) and update architecture roadmaps accordingly
SKILLS & COMPETENCIES
- Time management & prioritisation skills
- Excellent interpersonal and communication skills (in English or/and other European languages)
- Flexibility - being an effective team player means being flexible in your approach
- Intellectual Curiosity – we are looking for someone who is truly interested in our profession
- Delivery focus – the ability to proactively churn through work at pace and deliver quality outputs
- Strong critical thinking and problem-solving skills
- Passion for our mission ‘to generate a more sustainable future by leading the transition to clean energy
Our values: be a leader, build trust, be responsible, be innovative and ‘bring your alpha’.
EXPERIENCE & QUALIFICATIONS
- 5+ years in security architecture/cyber engineering, incl. 3+ years securing renewable energy, utilities or critical-infrastructure environments
- Deep knowledge of Azure security services, hybrid networking, container/serverless security and DevSecOps tooling
- Demonstrable experience hardening corporate business platforms (ERP, CRM, HR, finance, M365, identity providers, SaaS)
- Working familiarity with offensive-security / ethical-hacking techniques
- Strong grasp of OT protocols (Modbus/TCP, IEC 61850, DNP3) and SCADA/RTU architectures
- Excellent stakeholder skills; proven record partnering with Data Protection Officer, Risk and Compliance, Security Operations.
- CISSP, CISM, SABSA, TOGAF (Security), or Azure Security Speciality (desirable)
- ISA/IEC 62443 Cybersecurity Specialist or GIAC GICSP, demonstrating ethical-hacking capability (desirable)
- Experience navigating ISO 27001/27019 certification, NIS2 readiness, or TSO cybersecurity codes (desirable)
- The right to work in the UK.
WHAT WE OFFER
- A busy role in a supportive team, with plenty of opportunities to learn
- International scope – we operate in over 8 countries
- Hybrid working – we will need you in the central London (Mayfair) office at least twice a week, but you will normally be able to work remotely for the remainder of the week
- 30 days’ holiday per year (3 of which are taken during the festive shutdown in December)
- Private pension
- BUPA Healthcare for you and qualifying dependents
- Cycle to work and electric vehicle leasing schemes
- Annual discretionary bonus.
Contact Detail:
NextEnergy Group Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Security and Information Security Architect (City of London)
✨Tip Number 1
Familiarise yourself with the latest trends in security architecture, especially in renewable energy. Understanding the specific challenges and solutions in this sector will help you stand out during discussions with our team.
✨Tip Number 2
Network with professionals in the field of security and information architecture. Attend industry events or webinars to connect with others who share your interests and may have insights into our company culture and expectations.
✨Tip Number 3
Demonstrate your problem-solving skills by preparing examples of how you've tackled security challenges in previous roles. Be ready to discuss these scenarios in detail during interviews to showcase your critical thinking abilities.
✨Tip Number 4
Stay updated on compliance frameworks relevant to our industry, such as ISO 27001 and NIS2. Showing that you are knowledgeable about these standards can give you an edge when discussing your fit for the role.
We think you need these skills to ace Security and Information Security Architect (City of London)
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights relevant experience in security architecture and cyber engineering, especially in renewable energy or critical infrastructure. Use keywords from the job description to demonstrate your fit for the role.
Craft a Compelling Cover Letter: Write a cover letter that showcases your passion for sustainable energy and your understanding of security principles. Mention specific projects or experiences that align with the responsibilities outlined in the job description.
Highlight Relevant Skills: Emphasise your time management, communication skills, and flexibility in your application. Provide examples of how you've successfully collaborated with teams or managed multiple priorities in past roles.
Showcase Continuous Learning: Mention any certifications or ongoing education related to security architecture, such as CISSP or Azure Security Speciality. This demonstrates your commitment to staying updated in the field and aligns with the company's values of innovation and responsibility.
How to prepare for a job interview at NextEnergy Group
✨Understand the Role and Responsibilities
Make sure you thoroughly understand the key responsibilities of the Security & Information Security Architect role. Familiarise yourself with concepts like secure-by-design principles, threat modelling, and compliance frameworks such as ISO 27001 and NIST CSF. This will help you articulate how your experience aligns with their needs.
✨Showcase Your Technical Expertise
Be prepared to discuss your technical skills in detail, especially regarding Azure security services, hybrid networking, and DevSecOps tooling. Highlight any relevant projects where you've implemented security measures or improved systems, as this will demonstrate your hands-on experience.
✨Demonstrate Strong Communication Skills
Since excellent interpersonal and communication skills are crucial for this role, practice articulating your thoughts clearly and concisely. Be ready to explain complex security concepts in a way that is easy to understand, as you may need to collaborate with non-technical stakeholders.
✨Express Your Passion for Sustainability
The company is focused on leading the transition to clean energy, so be sure to convey your passion for sustainability and renewable energy. Share any relevant experiences or ideas you have about how security can support their mission, which will show that you align with their values.
