Senior Security & Compliance Architect (Hybrid, London)

About the role

We are looking for a Senior Security & Compliance Architect to lead the design, governance and assurance of secure cloud and SaaS platforms across large‑scale enterprise transformation programmes. The role is based in London with a hybrid working model (1‑2 days onsite per week) and offers a competitive salary up to £140,000 plus a comprehensive benefits package.

Key responsibilities

• Define and maintain SaaS‑first security reference architectures covering identity, integrations, data protection and monitoring.
• Drive security‑by‑design and privacy‑by‑default across Microsoft 365, Azure, Oracle Cloud and other enterprise platforms.
• Establish and enforce Zero Trust baselines for cloud and SaaS services.
• Design and implement data protection controls such as classification, DLP, encryption, retention and access policies.
• Interpret and apply compliance requirements including GDPR, ISO 27001, SOC 2 and client‑specific obligations.
• Lead SaaS/vendor security assurance activities, including risk assessments and architecture reviews.
• Support incident response, resilience, backup and disaster‑recovery architecture patterns.
• Collaborate with Legal, Procurement and Commercial teams to embed governance and contractual controls.
• Act as a trusted advisor to senior stakeholders, guiding security architecture reviews and risk‑based decisions.

Required profile

• Extensive experience as a Security or Solution Architect on large‑scale enterprise transformation programmes.
• Deep knowledge of enterprise application landscapes and security architecture across applications, data, infrastructure and cloud.
• Strong Identity & Access Management (IAM) expertise.
• Proven track record with Microsoft security technologies and Zero Trust implementations.
• Solid understanding of security governance frameworks such as NIST and FAIR.
• Excellent stakeholder management and executive communication skills.

Required skills

• Microsoft Azure
• Entra ID (Azure AD)
• Conditional Access
• Privileged Identity Management (PIM)
• Microsoft Defender
• Microsoft 365 security stack
• Identity & Access Management (IAM)
• Zero Trust architecture
• Data Loss Prevention (DLP)
• Encryption and data classification
• GDPR compliance
• ISO 27001
• SOC 2
• NIST framework
• FAIR risk analysis

What we offer

• Competitive salary up to £140,000 per year
• Hybrid working model (1‑2 days onsite)
• Comprehensive benefits package
• Opportunity to shape security strategy for large‑scale digital transformation