Lead Cyber Security Architect

Salary: £38,000 - 68,000 per year

Requirements:

• We require DV clearance.
• We require at least 5 years of experience in Cyber Security.
• We require proven multicloud and edge architecture experience.
• We require Defence experience and familiarity with UK guidance.
• We require eligibility for the appropriate clearance and UK Sole national status.
• We require CISSP or an equivalent certification.
• We require TOGAF certification.
• We value adaptability and a pragmatic, positive attitude towards security as a business enabler.

Responsibilities:

• We lead the security elements of the programme across different AI/ML development and trial use cases.
• We chair Security Working Groups and trination collaboration.
• We manage security visibility, outcomes, and senior stakeholder engagement.
• We handle threat and risk management and translate ambiguous requirements into testable controls.
• We define classification-aware architectures, trust boundaries, and cross-domain data movement guardrails.
• We provide security guidance and controls for complex programmes.
• We lead the security roadmap, including DevSecOps, policy-as-code controls, and risk-based CI/CD gates.
• We govern supply chain security, including artefact signing, SBOMs, provenance, and SLSA-style controls.
• We drive improvements in secure release lead time, zero-critical promotion checkpoints, supplier onboarding efficiency, and executive risk communication.

Technologies:

• AI
• Architect
• CI/CD
• DevSecOps
• Support
• Security
• TOGAF

More:

We are a Defence client seeking a Lead Security Architect for a Hampshire-based role that is 50% office based and 50% remote. This is an Inside IR35 contract at £800 per day, with a wider rate of £800.00 - £850.00 per day. We support multicloud environments and the integration roadmap for AI/ML, and the role sits within a programme that requires strong security leadership, stakeholder management, and collaboration across teams. We are looking for someone who can act as a security enabler for the business and contribute to a pragmatic, positive security culture.