Security Architect (UK Wide, GB)

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

About the role

We are seeking a Security Architect to join the BPS Security Architecture & Assurance (Security Governance) capability within highly regulated UK Government and financial services environments. Working across complex, business-critical platforms and alongside other Security Architects and Assurance Managers, you will ensure security is embedded by design and evidenced throughout delivery. This role is focused on judgement, influence and risk-based decision-making, balancing security, business and operational priorities to deliver defensible architecture, assurance outcomes and risk assessments that will withstand client and audit scrutiny.

The successful candidate will provide security architecture oversight and assurance across client programmes, projects, services and third-party suppliers within complex enterprise and regulated environments. The role is responsible for determining whether proposed solutions, designs and services meet organisational security requirements, regulatory obligations and good industry practice. The role does not design or implement technical solutions. Instead, it provides independent review, governance, risk assessment, and security approval activities throughout the solution lifecycle.

Work & Team Culture

• Collaborative, inclusive, and supportive environment that encourages teamwork, flexibility, and continuous learning.
• Opportunity to take ownership, contribute meaningful ideas, and make a visible impact on business and customer outcomes.
• Work with modern, innovative technologies that enhance skills, improve efficiency, and support continuous digital transformation.

Core Responsibilities

• Participate in Architecture Review Boards and provide review/security sign-off in line with governance requirements.
• Define and enforce secure architecture standards, reference patterns, and mandatory security controls.
• Review/approve security-relevant designs and major technical changes.
• Act as a security design authority across infrastructure, platforms, and applications.
• Conduct independent security architecture reviews and assess designs against security standards, policies and control frameworks.
• Perform security risk assessments (to identify vulnerabilities), threat assessments, and support risk treatment decisions.
• Assess third-party suppliers, SaaS platforms and cloud services using assurance evidence and independent testing reports.
• Ensure alignment with NIST CSF, NCSC guidance, CIS Controls, ISO/IEC 27001, UK GDPR, UK Gov. Security Classifications.
• Coordinate and support IT Health Checks (ITHCs), ensure findings are reviewed, risk-assessed, and remediated through appropriate governance processes.
• Provide pragmatic security guidance and act as a trusted adviser to delivery and business stakeholders.

Essential Skills and Experience

• Significant experience within information security, cyber security, information security architecture, or DevOps.
• Experience providing security assurance, architecture reviews, or governance oversight.
• Strong understanding of security risk management and security control frameworks.
• Experience reviewing cloud, SaaS and enterprise technology architectures.
• Excellent stakeholder management, communication, and influencing skills.

Desirable Certifications/Qualifications

• CCSP