Senior Cyber Architect

Overview

In this role you will strengthen the Cyber Security Strategy & Architecture team to meet global demand across security operations, threat management, and emerging areas such as AI and data. You will provide architectural guidance at the pace of business, enabling scalable outcomes in a federated global environment. The role partners with engineering and security functions to drive secure-by-design decisions and long-term improvements. This is a chance to shape security architecture in a major international insurer and work across cross-functional teams.

Pay / Benefits

• 30 days holiday with option to buy up to 2
• Flexible working
• Pension with 10% employer contributions
• Private medical insurance
• Family-friendly policies – 26 weeks leave
• Cycle-to-Work

Responsibilities

• Provide architectural guidance to security operations and threat management teams
• Interpret complex security events and systemic risk patterns
• Contribute to improved detection, response, and resilience through architectural input
• Translate operational security insights into long-term architectural improvements
• Analyze findings from security assurance activities and identify root causes
• Collaborate with engineering to design systemic fixes and prioritize remediation by architectural risk
• Contribute to enterprise security architecture across applications, cloud, data, IAM, and secure-by-design principles
• Ensure alignment with global security architecture standards in a federated operating model
• Participate in design reviews and threat modeling, providing pragmatic guidance
• Embed secure-by-design principles into solution architecture decisions and act as trusted advisor

Key requirements

• Significant experience in cybersecurity architecture or senior security engineering
• Strong experience in security operations or threat management
• Proven experience with security testing outcomes (red team, purple team, penetration testing)
• Experience in financial services or insurance industry preferred
• Experience operating in global, federated environments across multiple time zones
• Exposure to cloud, application, identity, and data security domains

• Communication
• Stakeholder Management
• Intentional collaboration
• Security operations
• Threat management
• Red team / purple team / penetration testing

…