Main duties and responsibilities

• Support projects and initiatives in an advisory capacity as a security SME
• Design secure architectures for networks, systems, applications, and cloud environments in line with business and regulatory requirements
• Ability to assess and architect guardrails for AI agents with tool-use/autonomous action capabilities
• Knowledge of securing LLM and generative AI deployments: prompt injection defences, output validation, data leakage prevention, model access controls
• Understanding of data governance for AI training data (sensitive data handling, PII redaction, data poisoning risks)
• Identify and provide requirements to projects and initiatives
• Review proposed technical solutions to ensure they meet security requirements (implementation governance)
• Produce and maintain architectural artefacts (designs, standards, patterns, reference architectures)
• Supply security requirements into projects and RFI/RFPs
• Evaluate and recommend security tools, technologies and vendors
• Drive improvements, support compliance through the execution of our security strategy
• Mentor engineering and IT teams on secure design principles
• Support and influence technical strategy
• 
  

About You

• Experience of working to demonstrate compliance with Cloud Technologies (Azure, AWS, GCP) – Azure preferred however not essential.
• Experience with security frameworks: NIST CSF, ISO 27001/27002, CIS Controls, MITRE ATT&CK
• Familiarity with Zero Trust architecture principles
• Knowledge of secure SDLC and DevSecOps practices (SAST, DAST, container/image scanning, CI/CD security)
• Maintained awareness of emerging threats and vulnerability research.
• Working knowledge of the use of Enterprise Systems Management tools
• Familiarity in Agile development processes
• 
  

The Following Demonstrable Experience Is Essential (minimum Of 5)

• Typically 7+ years in Information Security/IT, with 3+ years in an architecture-focused role
• Cloud Security - Adoption & migration, Governance
• Data Governance - DR, DLP, DRM, Data lifecycle Management
• App & Systems Development Security
• Asset Management including MDM
• Identity & Access management
• Network & Endpoint security
• Logging, Monitoring & Retention
• Threat intelligence, Automation & Orchestration
• Configuration & Vulnerability management
•