Senior Security & Compliance Architect

About the role

We are looking for a Senior Security & Compliance Architect to lead the design, governance and assurance of secure cloud and SaaS platforms across large‑scale enterprise transformation programmes. The role will be based in London with a hybrid working model (1‑2 days onsite per week).

Key responsibilities

• Define and maintain SaaS‑first security reference architectures covering identity, integrations, data protection and monitoring.
• Drive security‑by‑design and privacy‑by‑default across digital transformation initiatives.
• Establish and enforce Zero Trust baselines for Microsoft 365, Azure, Oracle Cloud and other SaaS platforms.
• Design and implement data protection controls such as classification, DLP, encryption, retention and access policies.
• Interpret and apply compliance requirements including GDPR, ISO 27001, SOC 2 and client security obligations.
• Lead SaaS/vendor security assurance activities, including risk assessments, architecture reviews and due diligence.
• Support incident response, resilience, backup and disaster‑recovery architecture patterns.
• Collaborate with Legal, Procurement and Commercial teams to embed governance and contractual controls.
• Act as a trusted advisor to senior stakeholders, guiding security architecture reviews and risk‑based decisions.

Required profile

• Proven experience as a Security or Solution Architect on large‑scale enterprise transformation programmes.
• Deep expertise in security architecture across applications, data, infrastructure and cloud.
• Strong Identity & Access Management (IAM) background.
• Extensive experience with Microsoft security technologies (Azure, Entra ID, Conditional Access, PIM, Defender, Microsoft 365 security stack).
• Solid understanding of security governance, risk and compliance frameworks such as NIST and FAIR.
• Demonstrated ability to deliver security architecture over multi‑year programmes.
• Excellent stakeholder management and executive communication skills.

Required skills

• Microsoft Azure
• Microsoft Entra ID (Azure AD)
• Conditional Access
• Privileged Identity Management (PIM)
• Microsoft Defender
• Microsoft 365 security suite
• Identity & Access Management
• Zero Trust architecture
• NIST framework
• FAIR framework

What we offer

• Competitive salary up to £140,000 per year plus a comprehensive package.
• Hybrid working model (1‑2 days onsite in London).
• Opportunity to shape security strategy for a leading enterprise transformation portfolio.