Security Architect at Guardian Careers

London, England, United Kingdom -

Full Time

Start Date

Immediate

Expiry Date

17 Sep, 26

Salary

0.0

Posted On

19 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Security Architecture, Cloud Security, Threat Modelling, Risk Assessment, Identity And Access Management, Network Security, Encryption, Vulnerability Management, Security Monitoring, Stakeholder Management, Agile Methodology, Security-by-Design

Industry

Book and Periodical Publishing

Description

Join our team at the Guardian and be a part of a diverse and inclusive global organisation that delivers fearless, investigative journalism, and holds power to account. Our team of award-winning journalists, cutting-edge commercial professionals, and industry-leading digital experts are committed to making a difference and represent a wide range of backgrounds and perspectives. We offer a challenging and exciting environment for career development, with a focus on training, growth and fostering an inclusive culture. The Information Security team is the organisational cybersecurity centre of excellence. We are responsible for driving the organisational cyber security improvements, implementing core security controls and supporting other technical teams in implementing the required security standards in a diverse technology ecosystem. The Security Architect supports strategic and technical leadership for information security architecture across the organisation. They define security frameworks, review solution designs, establish security standards, and work closely with engineering, infrastructure, cloud, and business teams to ensure that security controls are embedded throughout the technology lifecycle. The role supports regulatory compliance, risk management, and resilience objectives while enabling the secure adoption of new technologies. We are looking for a hands-on security architect with experience in both cloud security and traditional security controls design and implementation. About the role * Provide security architecture guidance and oversight for business, technology, and transformation initiatives. * Review solution, application, infrastructure, and cloud designs to ensure security requirements are incorporated from the outset. * Conduct threat modelling, security risk assessments, and architecture reviews to identify and mitigate security risks. * Collaborate with engineering, infrastructure, product, and business teams to embed security-by-design practices across the technology lifecycle. * Develop and maintain security reference architectures, design standards, and technical security controls. * Ensure compliance with relevant regulatory, legal, and industry requirements, including data protection and information security standards. * Evaluate emerging technologies and provide recommendations on secure adoption and implementation. * Support incident response, vulnerability management, and remediation activities by providing architectural expertise and guidance. * Work closely with governance, risk, and compliance teams to align security architecture with enterprise risk management objectives. About you * Proven experience as a Security Architect, within a complex enterprise environment. * Strong understanding of security architecture principles across cloud, infrastructure, networks, applications, and data platforms. * Experience designing and implementing security controls in cloud environments such as AWS, Azure, or Google Cloud Platform. * Knowledge of industry security frameworks and standards, including ISO 27001, NIST, CIS Controls, and OWASP. * Experience conducting security architecture reviews, threat modelling, and risk assessments. * Strong understanding of identity and access management, network security, encryption, vulnerability management, and security monitoring technologies. * Ability to balance security requirements with business objectives and operational needs. * Excellent stakeholder management and communication skills, with the ability to influence technical and non-technical audiences. * Experience working within agile delivery teams and providing security guidance throughout the software development lifecycle. * Relevant professional certifications such as CISSP, CCSP, SABSA, TOGAF, AWS Certified Security Specialist, AWS Certified Solutions Architect. * A collaborative mindset, strong problem-solving skills, and a passion for enabling secure innovation. We actively encourage applications from groups traditionally underrepresented in the UK media We operate in a hybrid environment working 3 days a week from our offices in Kings Cross and 2 days a week remotely. We value and respect all differences (seen and unseen) in all people. We aspire to have inclusive working experiences and an environment that reflects the audience we serve, where our people have equal access to career development opportunities, their voices are heard and can contribute to our future. We actively encourage applications from people of all backgrounds. Many of our staff work flexibly and we will consider all requests for flexible working arrangements. How to apply To apply, please upload your latest CV and a cover letter which outlines why you’d love to take on this role, and why you’re a great match for what we’re looking for. We appreciate the time taken to prepare each application we receive. We do not use AI-assisted technology to review applications; every application is reviewed by a member of our recruitment team. Thank you for bearing with us during the screening process. The closing date for applications is Friday 3rd July 2026. All roles at the Guardian are open for everybody to apply. It is important to us that you feel supported and comfortable throughout your recruitment process, in order to perform your best. Please let us know if there are any changes we could make to help your application, this includes providing documents in accessible formats or personalising the process to better support your needs. Please contact Anna Vipers on anna.vipers@theguardian.com to discuss further so we can work with you to support you through your application. Benefits at the Guardian You'll have 30 days of annual leave per year (plus bank holidays) with the option to purchase an additional 5 days. Our pension scheme is generous; if you contribute 5% then we will contribute 8-12% (depending on your age). We believe in giving back, which is why employees are given 2 volunteering days annually and the option of payroll giving. Season ticket loans are also available. You are entitled to private healthcare, life cover, income protection, and eye tests. You can also opt in to dental insurance. We have enhanced maternity, paternity, adoption and shared parental leave policies in place. We also support our employees by offering an IVF, menopause, baby loss, and trans equality policy. Culture and wellbeing We want everyone to feel like they belong at the Guardian and we champion diversity of thought. Our various employee forums provide a platform to use their voice to foster an inclusive workplace. We became the first major media organisation to achieve B Corp status. We offer tools to help you prioritise your wellbeing including access to our employee benefits platform which provides tailored support for health and wellbeing. In addition, we also offer free yoga and pilates classes. These run alongside our corporate gym membership and cycle to work scheme. Our canteen has views overlooking the Regents Canal and caters for breakfast, lunch and dinner. Learning and development We encourage personal and professional growth. Employees have access to a broad range of tools and solutions, and we are happy to support the pursuit of professional qualifications through vocational courses and apprenticeships.

Responsibilities

The Security Architect provides strategic and technical leadership to define security frameworks and establish standards across the organization. They review solution designs and collaborate with engineering and cloud teams to embed security controls throughout the technology lifecycle.