Head of Enterprise Security Architecture

The Head of Enterprise Security Architecture will play a pivotal role in defining our security strategy and architecture. This individual will lead the development, implementation and maintenance of a comprehensive security architecture framework, methodologies, standards, patterns and compelling strategies and roadmaps with input from the business, architects, engineering, operations, third parties, and the industry to safeguard the company’s assets, data, and technology infrastructure. The ideal candidate combines leadership with a deep understanding of cybersecurity threats, technologies, and best practices.

The CISO Function is responsible for ensuring that the cyber resilience of the Post Office is commensurate with the threats it faces and developing an integrated and comprehensive security strategy and associated architecture is key to protecting the organization.

The Head of Enterprise Security Architecture will work collaboratively across all architecture areas, engineering and delivery teams and will motivate and lead security architecture initiatives to ensure that new and changed solutions are architected securely and in line with the enterprise security architecture.

The Head of Security Architecture will be expected to have broad knowledge of modern digital architecture including cloud, data, API, digital, and mobile and how to design, deliver and operate them securely. This includes domains covering endpoint security, network security, data security, hybrid cloud security, and zero trust concepts/strategies.

The role will be expected to deliver good quality in tight timescales, the person in role will be required to resolve disputes promptly and find solutions to complex issues. In addition, the role will require analysis of data and drafting reports for review & presentation.

Our business is changing and we understand that attracting the right talent is pivotal in driving the positive change needed, to help us achieve our ambitious goals. Beyond a competitive salary, we offer a comprehensive benefits package that includes:

• 27.5 days annual leave (rising to 30 after 2 years), plus bank holidays
• Up to 18% on target bonus opportunity
• Annual car allowance
• Generous pension scheme with minimum 10% employer contribution
• Access to 24/7 digital GP services and our Employee Assistance Programme
• 6 x Life assurance and income protection after 12 months service
• Over 400 online courses, mentoring, apprenticeships, and development programmes
• Access to our benefits platform for exclusive discounts & savings

To be successful in this role you will be well versed/experience with the below:

• Develop, operate and continuously improve the Corporate Cyber Security function and related services based on business priorities and strategic objectives.
• Lead the development and implementation of improved internal controls within corporate technology that operate in the most effective and efficient way.
• Embed effective security processes, policies, standards and patterns as a standard way of working to drive improvements to our security posture.
• Create and maintain operational plans that deliver corporate security improvements.
• Monitor and analyse emerging threats and trends to proactively identify and adjust security risks and appropriate controls.
• Create and deliver meaningful KPIs, KRI’s and other governance materials at both Management and Executive level for Corporate services.
• Actively engage in delivery of project requirements related to corporate services.
• Manage third party vendors security including defining security requirements, assessing vulnerabilities, and third-party risks.
• Collaborate with relevant teams to negotiate security terms in vendor and customer contracts, ensuring they protect the needs of the business.
• Oversee and execute periodic risk and impact assessments to identify security risks.
• Identify, evaluate, monitor and drive accountability for security risk mitigation and control compliance across all corporate services.
• Lead a team of security professionals that deliver operational and change activities.
• Coach, mentor, and develop staff and provide career development planning and opportunities.

TECHNICAL SKILLS

• 10+ years of experience in cyber security, with at least 5 years in proven track record of managing cybersecurity risks and designing risk mitigation strategies.
• Experience of multiple cyber security disciplines - Governance & Compliance, Assurance, Operations, etc.
• Knowledge and experience in cloud and on premise technology stacks, security and DP related compliance, legal & regulatory frameworks and standards, including Cyber Essentials Plus, NIST, ISO27001, ITIL, PCI/DSS and GDPR.
• Experience managing and developing teams.
• Strong knowledge of internal control frameworks.
• Experience of implementing and monitoring IT controls in a large/enterprise organisation.
• Proficiency in preparation of reports, dashboards, and documentation.

SOFT SKILLS

• Demonstrates Post Office values and champions customer-centric thinking.
• Lead high-performance teams, proven ability to coach and mentor.
• Enable the Corporate Security team to manage their own individual performances and career progression.
• High level of initiative, dependability and ability to work with little supervision while being resilient to change.
• Growth mind-set that drives learning, motivation, and achievement.
• Experience with senior stakeholder engagement and relationship building.
• Excellent communication skills, with the ability to effectively simplify complex ideas for Corporates and business stakeholders at all levels ranging from board members to technical specialists.

At Post Office Ltd, we’re proud to be at the heart of communities across the UK, upheld by the dedication and service of our postmasters. We offer essential services that people rely on every day, from parcels and banking to identity and government services. While we continue to evolve with digital innovation, our commitment to personal, face-to-face service remains core to who we are.

Our journey is one of reflection, growth, and meaningful change. We’re looking for people who think differently. Those with resilience, purpose, and a deep sense of responsibility to our postmasters, partners and the communities they serve. If you're driven by the chance to make a real impact and help shape a future, built on progress and integrity, we’d love to hear from you.

Our commitment to embracing diversity extends beyond just words. While we’ve outlined key skills above, we recognise that great candidates come from a variety of backgrounds. We value diverse perspectives and are committed to building an inclusive workplace where everyone can thrive.

As a Disability Confident Employer, we recognise the value people with disabilities can bring to our business. If you require any reasonable adjustments throughout the recruitment process or would like further details on the job description, please contact talentacquisition@postoffice.co.uk.

We’re thrilled by your interest in this opportunity and truly value every application we receive. Please note the advert may close early if we receive a high volume of applications. Unfortunately, we’re unable to provide individual feedback on all submissions.