Senior Security Architect – Data Protection & Azure Cloud Security

About the role

We are looking for an experienced Senior Security Architect to join a major enterprise cybersecurity function, taking a leading role in the design and governance of security architecture across Data Protection and Cloud Security. This senior position sits within a large, complex and highly regulated environment, collaborating with business, technology, engineering, risk and security teams to ensure new applications, platforms and cloud solutions are built securely from the outset.

Key responsibilities

• Lead the design and delivery of end‑to‑end security architecture across enterprise applications, platforms and cloud environments.
• Develop high‑level security designs and translate business, technology and risk requirements into practical architecture.
• Define and maintain security architecture principles, standards, patterns and reusable design guidance.
• Provide architecture governance and design assurance, challenging solutions and ensuring security requirements are met throughout the delivery lifecycle.
• Act as Subject Matter Expert for Data Protection and Cloud Security, guiding architecture, engineering and business teams.
• Design and govern enterprise data protection controls, including discovery, classification, labeling, DLP, governance, retention and encryption.
• Support secure design and adoption of Microsoft Azure, alongside AWS, SaaS and hybrid‑cloud environments.

Required profile

• Significant experience as a Security Architect, Cyber Security Architect or Enterprise Security Architect in large, complex organisations.
• Strong knowledge of security architecture governance, standards, patterns and design reviews.
• Deep expertise in data protection, including classification, discovery, labeling, DLP and lifecycle controls.
• Extensive experience with Microsoft Azure security architecture and good knowledge of AWS, SaaS and multi‑cloud security.
• Understanding of IAM, Zero Trust, encryption, key management and access‑control principles.
• Ability to translate risk assessments and regulatory requirements (e.g., GDPR, DORA, PCI‑DSS, SOX, SWIFT CSP) into technical security architecture.
• Excellent communication skills for engaging senior stakeholders and cross‑functional teams.

Required skills

• Microsoft Azure security architecture
• AWS security concepts
• Data discovery and inventory
• Data classification and sensitivity labeling
• Data Loss Prevention (DLP)
• Encryption and key management
• Identity and Access Management (IAM) and Zero Trust models
• Microsoft Purview (Information Protection, data classification, labeling, DLP)