Security Architect

About the Role

Salary: £62,900.00 - £100,000.00. Contract type: Permanent. Working pattern: hybrid approach between London head office and home, as per personal needs and business requirements.

The John Lewis Partnership (JLP) is focused on security and data‑driven insights to serve partners and customers.

This role, as an integrated team member or advisor to service and domain teams, will design security solutions, patterns, and blueprints across data, platforms, cloud, and network capabilities to support strategic objectives within a changing threat landscape.

Key Responsibilities

• Design end‑to‑end security solutions: create effective, efficient, repeatable, and sustainable solutions and patterns across cloud platforms (AWS, GCP) and traditional hosting environments.
• Embed best practice and reduce risk: ensure security architecture best practices are applied during solution design, reducing delivery cost, operational risk, and technical debt.
• Democratize secure delivery: enable architects and engineers across the enterprise via clear design principles, patterns, blueprints, and guardrails.
• Provide commercial and contractual counsel: advise on commercial and contractual implications of existing or new obligations, reviewing contractual terms of technologies and business services.
• Drive cross‑functional collaboration: partner closely with the CISO function, architecture, and engineering teams to provide value and optimise opportunities through solution evangelism.
• Monitor and advise on industry trends: stay up to date with technology, retail, and socio‑economic trends to influence internal technology and business decisions.

Essential Skills and Experience

• Modern security architecture expertise: extensive experience translating roadmap intent into outcome‑focused solutions that integrate best practice with business context.
• Agile and technical architecture delivery: adaptable, engineering‑focused mindset with proven success across multiple service and domain teams using Agile and domain‑based delivery models.
• Core security frameworks and methodologies: practical experience facilitating threat‑modeling workshops, working in Dev Sec Ops/Sec Ops, applying Zero Trust and NIST Cybersecurity Framework.
• Hybrid‑cloud and infrastructure knowledge: expertise securing data and workloads across Google Cloud/Workspace, Amazon Web Services, Zscaler, and commodity Saa S.
• Critical influence and leadership: ability to empower and influence decision‑makers, resolve challenges, and deliver outcomes aligned with business strategy.
• Emerging technology and threat awareness: strong understanding of attacker tools, techniques, procedures and practical experience securing AI/LLM deployments.

Desirable Skills and Experience

• Advanced architecture frameworks: experience designing SOC architectures (SIEM, SOAR, vulnerability management) and defining secure development lifecycles.
• Regulated environments and evaluation: experience in PCI‑DSS and leading product evaluation and tool selection processes.
• Professional certifications: TOGAF, SABSA, CISSP, CCSP, ISSAP, CEH, or platform‑specific certifications such as GCP Professional Cloud Architect/Security Engineer, Zscaler Zero Trust Associate, CSA Trusted AI Safety Expert.
• Retail business domain knowledge: understanding of retail capabilities and processes, benchmarking against marketplace best practice.
• Location

London Central Office, 1 Drummond Gate, London, SW1V 2QQ.

#J-18808-Ljbffr