Lead Security Architect

Company Description

Phoenix IT Consultancy Limited is an Information Technology and Cyber Professional Services company based in Yorkshire, serving a range of public and private sector clients. The organization focuses on delivering secure, resilient technology solutions and expert cybersecurity advisory services. Team members work closely with customers to understand complex technical and regulatory requirements and translate them into practical solutions. The company values innovation, professionalism, and continuous learning, offering opportunities to work with modern technologies and evolving security frameworks.

Role Description

The Lead Security Architect position is a full-time role responsible for defining and overseeing the our clients security architecture across applications, networks, and information systems. Day-to-day work includes designing secure system and solution architectures, conducting security reviews and threat modelling, and guiding the implementation of security controls and standards. The role collaborates with engineering, operations, and leadership teams to ensure security is integrated into project lifecycles, from design through deployment and maintenance. The Lead Security Architect will evaluate new technologies, perform risk assessments, support incident response with architectural expertise, and provide mentoring and direction to other security and technical professionals.

Qualifications

• Strong expertise in Security Architecture Design, including enterprise security frameworks, secure design patterns, and alignment with industry standards and regulations.
• Proven ability to communicate complex security concepts to technical and non-technical stakeholders Including senior business leaders) and to influence architectural decisions.
• Hands-on experience in Application Security, such as secure coding practices, code and design review, threat modelling, and integrating security into SDLC and DevSecOps pipelines.
• Deep knowledge of Cybersecurity principles, including risk management, vulnerability management, security operations, and incident response support.
• Proven experience in Securing Cloud based Services and Technologies.
• Solid background in Information Security, including data protection, identity and access management, governance, policies, and compliance with relevant standards (e.g., ISO 27001, NIST).
• Experience in working within the UK public sector and familiar with Secure By Design, Gov Assure and NCSC standards and guidance.
• Relevant certifications such as CISSP, CISM, SABSA, CCSP
• Experience leading or mentoring technical teams and working in multi-disciplinary project environments.
• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

#J-18808-Ljbffr