Manager, Security Architect – Financial Services, Enterprise Security

Overview

As a Security Architect at Deloitte, you design and implement cyber security solutions for large financial services clients, shaping secure architectures and integration with enterprise systems. You will work within a cyber security practice that values collaboration, growth, and hands-on delivery across projects with varying client needs. You’ll define designs, guide security patterns, and help clients manage risk while driving security maturity. This role offers impact at scale through cross-functional teamwork and cutting-edge security technologies.

Pay / Benefits

• hybrid working in London
• return-to-work program
• focus on wellbeing and development
• professional growth opportunities
• supportive culture
• impactful work with clients

Responsibilities

• Design and architect cyber security solutions aligned with business goals and standards
• Create high-level and low-level designs and specify system requirements
• Integrate security workflows with third-party tools and SIEM solutions
• Define RACI and maintain security architecture blueprints and reference models
• Develop functional and non-functional security requirements and technical specs
• Support technology evaluations and ensure tool alignment with security roadmaps
• Review existing configurations and identify security improvements and risk mitigations
• Oversee implementation, provide hyper-care support, and conduct post-implementation handover
• Deliver knowledge transfer through client trainings and contribute to proposals and eminence materials

Key requirements

• Extensive security architecture experience
• Experience in multiple areas such as cloud/data center security, DevSecOps, data security, network security, identity management, and security operations
• Understanding of risk assessment methodologies and ability to communicate risks to stakeholders
• Prior experience in financial services
• Ability to prioritise work and meet deadlines

• Agile thinking
• Stakeholder communication
• Prioritisation and time management
• Cloud/data center security
• DevSecOps and secure pipelines
• Data security across lifecycle

…