Security Consultant - Architecture

Location – London

Duration – c18 months

About us

DL is evolving. Across every part of our business, teams are embracing new opportunities and putting customers at the heart of everything they do. Whether you're already part of DL or thinking about joining us, you'll have the chance not only to be recognised for your skills, but also to build on them and be empowered to do your very best. At Direct Line, we know our customers expect simple, brilliant experiences — and to deliver on that promise, we need the right systems in place. Combining decades of industry experience with talented people in every field, we’re a customer-obsessed market powerhouse. And we all work together to be brilliant for customers, every single day.

What you’ll be doing

The Security Consultant (Architecture) is a role within our Security Design, Innovation & Enablement team. You will enable secure business change and run initiatives whilst ensuring the business remains secure and resilient. You will be working closely with Solutions Architects, Engineering Leads, Product Owners, Project Managers etc and be the security architecture SME that provides security consultancy, design and architecture input that ensures secure and resilient business solutions. You will promote an environment and culture of continuous improvement, experimentation and innovation.

• Develop and maintain relationships with aligned product areas.
• Safeguard the security and resilience of your aligned business unit(s).
• Understand stakeholder risk and control requirements, advising accordingly.
• Advise on the most efficient way to deliver change whilst remaining secure and resilient and using our policies, standards, guardrails and patterns.
• Acting as the front door for CISO for your stakeholders.
• Participate in CISO governance, peer reviews, stage gates, and KPI reporting.
• Identify areas of improvement in processes, standards, documentation, and proactively work on enhancements.
• Maintain an awareness of industry trends, laws, regulations, threats, and technology developments.
• Reporting and escalation of gaps, risks and issues, delivery status, risk posture etc to the CISO Chapter Area Lead and others within CISO.

What we’re looking for

• Has a deep understanding of cyber security architecture, technologies, controls, privacy, resilience, threat modelling, risk management, PCI, and data protection.
• Ability to build and maintain relationships and influence stakeholders at various levels.
• Has a keen technology, regulatory and resilience focus: you are passionate about security, improving solutions and processes, streamlining and efficiencies, cloud native, software development practices including continuous delivery, etc.
• A self-starter who can proactively manage and prioritise work across multiple workstreams simultaneously.
• Experience of one or more security controls frameworks including ISO 27001, NIST CSF, Cyber Essentials Plus.
• Relevant security and architectural certifications including CISSP, CCSP, AWS, Azure, CIS, CSA, TOGAF, SABSA, CompTIA Security+, CISM.

Ways of Working

Our hybrid model offers a 'best of both worlds' approach. When you'll be in the office depends on your role and team, but colleagues spend at least 50% of their time in the office. We recognise we wouldn't be where we are today without our colleagues, that's why we offer excellent benefits designed to suit your lifestyle:

• Employer contributed pension
• Annual company bonus
• Discounts on Insurance products
• Generous holiday allowance
• Flexible benefits package including optional health and dental insurance
• Buy as you earn share scheme
• Employee discounts and cashback
• Plus, many more

Direct Line Group is an equal opportunity employer, and we think diversity of background and thinking is a big strength in our people. We're delighted to feature as one of the UK's Top 50 Inclusive Employers and are committed to making our business an inclusive place to work, where everyone can be themselves and succeed in their careers. We know you're more than a CV, and the things that make you, you, are what bring potential to our business. We recognise and embrace people that work in different ways so if you need any adjustments to our recruitment process, please speak to the recruitment team who will be happy to support you.

Direct Line Insurance Group is now owned by Aviva Plc. If you are successful in your application, you may initially receive a Direct Line offer and contract of employment; however, your employment will transfer to Aviva Employment Services Limited from 1 July 2026 under TUPE. From that date, some terms and conditions of employment will change, including bonus and pension arrangements.