Principal Security Architect – Threat Modelling & Secure Design – Banking

Principal Security Architect – Threat Modelling & Secure Design – Banking

Excellent opportunity opens to join a London-based International Bank as their new Principal Security Architect. As a senior technical leader, you will drive the strengthening of secure design and threat modelling practises, and be a key source of expertise for engineers, architects, security consultants, and product teams.

Key responsibilities

• Technical Leadership – You will act as a senior technical specialist for the embedded security consulting function, providing guidance and expertise on complex security challenges across the change portfolio. You will help consultants and delivery teams navigate technically challenging situations and support the development of pragmatic security solutions.
• Threat Modelling – You will support and facilitate threat modelling activities across a diverse portfolio of projects and programmes. You will help consultants and technology teams identify threats, understand attack scenarios, evaluate mitigating controls, and incorporate security thinking into solution design from the earliest stages of delivery.
• Capability Building – You will help develop the technical capability of the embedded security consulting community through coaching, mentoring, knowledge sharing, and the creation of reusable approaches, frameworks, and guidance materials. You will champion security best practices and help elevate technical security expertise across the team.
• Problem Solving – You will support consultants and delivery teams in addressing complex information security challenges. This may include application security concerns, cloud security considerations, identity and access management issues, data protection requirements, emerging technologies, and technical risk mitigation strategies.
• Subject Matter Expertise – You will maintain deep knowledge across relevant information security domains, industry standards, emerging threats, and security technologies. You will contribute specialist expertise to strategic initiatives, help shape approaches to threat modelling and secure design, and support the continual evolution of the bank’s security capability.

What we’re looking for

• Extensive experience in one or more information security disciplines and a strong understanding of how security principles are applied within complex technology environments.
• Significant experience facilitating threat modelling activities and helping teams identify practical mitigations to security threats.
• Experience working with architects and engineers to develop secure technical designs across cloud, application, infrastructure, and data environments
• You enjoy solving difficult technical problems and can balance security requirements with business and delivery objectives.
• A strong communicator, able to explain complex security concepts to both technical and non-technical audiences.
• You enjoy coaching, mentoring, and sharing knowledge with colleagues to help build capability across a wider community of security consultants.
• You are comfortable operating across multiple projects simultaneously and can rapidly understand new technologies, architectures, and business domains.
• You have a collaborative mindset and enjoy working alongside engineering, architecture, product, and delivery teams to achieve shared outcomes.
• You have a strong understanding of information security risk management and how security risks are identified, articulated, and managed within a regulated financial services environment.
• You are aware of your own knowledge gaps and proactively seek specialist input when required.
• You are passionate about helping technology teams deliver secure solutions and embedding security considerations early in the design and delivery lifecycle.

Information Security Application Security Network Security Cloud Security Infrastructure Security Threat Modelling Privacy InfoSecArch InfoSec Architect Information Security Architect Information Security Consultant Information Security Lead Solution Architect Solution Architecture Bank Banking Finance Financial Services Change Modernisation CISSP Technology Change Regulatory Requirements Risk Management

#J-18808-Ljbffr…