Senior Enterprise Security Architect in Slough

Senior Enterprise Security Architect
Location:
London Working Pattern:
Office-based, 4 days per week Contract:
6 months Travel:
Travel to sites as required for workshops Position:
1
The Role
We are looking for a seasoned
Senior Enterprise Security Architect
to lead the implementation of the
CIS Critical Security Controls
across an enterprise environment. You will be responsible for defining the security architecture and roadmap, aligning existing technical controls to the CIS framework and helping transition the organisation towards a robust, measurable and automated security posture. The role combines enterprise security architecture, cloud security, infrastructure hardening, security automation, vulnerability management and senior stakeholder engagement.
Key Responsibilities
Lead the end-to-end design and implementation roadmap for
CIS Critical Security Controls v8 or latest . Assess current technical controls and map them against the CIS framework. Define secure architecture patterns across
on-premises, hybrid and multi-cloud environments . Apply security principles and CIS Benchmarks across AWS, Azure and GCP environments. Develop enterprise-wide security policies, standards and procedures aligned to CIS Implementation Groups. Work closely with DevOps, Network Engineering and IT Operations teams to automate security configurations. Drive automated patching, system hardening and configuration management. Design solutions for automated hardware and software asset discovery and inventory. Establish and mature enterprise vulnerability management processes. Support continuous identification, prioritisation and remediation of security risks. Act as a senior security SME, communicating security requirements, risks and progress to both technical teams and executive stakeholders. Define security KPIs and measures to demonstrate control effectiveness and transformation progress. Promote an automation-first approach to enterprise security controls.
Essential Experience
Strong senior-level experience in
Cybersecurity and Security Architecture . Deep hands-on experience implementing
CIS Critical Security Controls
within large enterprise environments. Enterprise security architecture experience across infrastructure and cloud environments. Strong understanding of secure cloud migration and cloud-native security practices. Experience with
Security as Code
and automated security configuration. Strong scripting or Infrastructure as Code experience using technologies such as
Python, PowerShell, Terraform, Ansible or Bicep . Expert knowledge of
CIS Benchmarks
for operating systems, cloud platforms and network devices. Strong understanding of IAM, Zero Trust, RBAC and ABAC. Experience working with senior and executive stakeholders. Ability to communicate complex security risks clearly to technical and business audiences.
Technical Skills
Cloud & Infrastructure Security AWS security, including Control Tower and SCPs Azure security, including Azure Policy GCP security and Organisation Policy Service Terraform, Ansible and/or Bicep GitOps and automated security configuration Identity & Access Management Zero Trust Architecture RBAC / ABAC Enterprise IAM Okta, Entra ID and/or Ping Security Operations Vulnerability management Tenable.io, Qualys and/or Rapid7 EDR/XDR CrowdStrike and/or SentinelOne SIEM/SOAR Splunk, Microsoft Sentinel and/or Google Chronicle Automated security response and monitoring Infrastructure & Network Security CIS Benchmarks Linux and Windows Server hardening Automated configuration management CMDB and asset discovery Network micro-segmentation NSX, Illumio and/or cloud-native security groups Encryption and key management TLS 1.3, AES-256 and HSMs
Certifications
Relevant certifications may include: CISSP / CISSP-ISSAP CISM TOGAF AWS Certified Security - Specialty Microsoft Certified: Cybersecurity Architect Expert Google Professional Cloud Security Engineer CISA / GSEC / GCIH Experience leading large-scale, cross-functional security transformation programmes is also highly desirable. For more information or to apply directly, please email I review applications daily and will contact shortlisted candidates as quickly as possible.
TPBN1_UKTJ