Senior Security Architect in Reading

The role of the Senior Security Architect demands business insight, technical acuity, and the ability to think, communicate and write at various levels of abstraction. A formal information security architecture process is one of the key enablers of a security programme. It is the planning process that provides the models, templates and principles that are used to design, implement and operate information security solutions. It enables consistency, leverage and reuse to satisfy the business requirements for security services in an optimum manner.

You will:

• Lead the design and assurance of security architectures across digital, cloud and data-driven solutions, ensuring they follow best practice, comply with regulations and meet organisational security standards.
• Facilitate and guide threat-modelling activities—such as identifying risks, attack paths and mitigations—so that security is embedded early in every solution.
• Ensure consistent and comprehensive application of security controls across the business unit, governing reusable patterns, principles and reference architectures.
• Work collaboratively with architecture, engineering and delivery teams to integrate security into agile and traditional delivery models, including support for DevSecOps and automated security testing.
• Provide end-to-end ownership of SSEN Distribution security architecture, including oversight of risks, controls, compliance and secure operations, ensuring alignment with frameworks such as NCSC, NIST and IEC 62443.

You have:

• Proven experience designing and governing security architectures in complex or regulated enterprise environments, ideally covering cloud, identity, data, network and application security.
• Strong understanding of cloud security (SaaS, PaaS, IaaS including AWS, Azure), including IAM, network protection, encryption, monitoring, zero-trust concepts and secure cloud-native design.
• Hands-on experience with threat-modelling techniques and the ability to translate identified threats into meaningful, actionable technical controls.
• Practical knowledge of key regulatory and compliance frameworks including NIS, with the ability to apply to solution design.
• Relevant professional certifications (e.g., CISSP, CCSP, Azure Security Engineer, AWS Security Specialty) or equivalent experience that demonstrates deep security capability.

About SSE: SSE’s purpose is to provide energy needed today while building a better world of energy for tomorrow. We do this by developing, building, operating and investing in electricity infrastructure and businesses needed in the energy transition. Our IT division powers growth across all SSE business areas by making sure we have the systems, software and security needed to take the lead in a low carbon world.

Flexible benefits to fit your life include discounts on private healthcare and gym memberships, wellbeing benefits like a free online GP and 24/7 counselling service, interest-free loans on tech and transport season tickets, or a new bike with our Cycle to Work scheme, as well as generous family entitlements such as maternity and adoption pay, and paternity leave.

We are dedicated to fostering an open and inclusive workplace where people from all backgrounds can thrive. We create equal opportunities for everyone to succeed and especially welcome applications from those who may not be well represented in our workforce or industry.