Security Consultant – Architect – Financial Services

Overview

In this role you will design secure technology solutions for financial services clients, reducing cyber risk and embedding security across delivery lifecycles. You will collaborate with delivery teams and stakeholders to align security with business goals and regulatory needs, using threat modelling and risk-based controls. You’ll work on high-impact projects with cutting-edge technology and a global expert network, supporting governance and compliance efforts. This opportunity offers growth in a dynamic, inclusive culture and exposure to diverse FS environments.

Pay / Benefits

• 25 days annual leave plus public holidays
• Private medical insurance
• Three days volunteering leave per year
• Industry-leading learning and certifications
• Career development programmes
• Flexible and hybrid working arrangements

Responsibilities

• Identify and define security requirements, controls, and risk treatments across the project lifecycle
• Conduct threat modelling using frameworks like MITRE ATT&CK to identify threats and propose controls
• Design functional and technical security requirements aligned with business objectives and regulatory obligations
• Support solution design, development, and deployment to ensure security controls are effectively implemented
• Define monitoring, logging, and assurance requirements to detect control failures and incidents
• Support procurement and third-party risk by detailing security requirements and reviewing supplier controls
• Maintain traceability between threats, risks, requirements, controls, testing outcomes, and risk decisions
• Produce security assurance evidence for risk acceptance, go-live, and operational readiness reviews
• Interpret laws, standards, and policies into practical delivery requirements
• Partner with architects, engineers, and stakeholders to embed security-by-design principles
• Contribute to governance, risk management, and compliance across engagements

Key requirements

• Bachelor’s degree or equivalent in a relevant field with experience in cyber security or security architecture
• Experience delivering security requirements and controls within transformation or delivery programmes
• Experience in financial services or other highly regulated industries
• Strong understanding of core security principles: Zero Trust, defence-in-depth, least privilege, secure-by-design, resilience-by-design
• Experience across domains: cloud security (Azure, AWS, GCP), network security, IAM, application security/DevSecOps, infrastructure security, Continuous Threat Exposure Management
• Ability to analyse technical risk and communicate with technical and non-technical stakeholders
• Strong written, verbal, and presentation skills
• Experience using AI-enabled tools to improve outcomes

• Strong communication
• Stakeholder engagement
• Problem-solving and analytical thinking
• Cloud security (Azure, AWS, GCP)
• Network security
• Identity and Access Management (IAM)

…