Security Architect

Contract Inside IR35

6 Months (options to extend)

Hybrid (2 days from home, 3 days in Swindon)

The Role

Our client are a leading global consultancy looking for a Security Architect to join a high-performance team within a global enterprise environment. You would be working on a project with a financial services organization focusing on their systems and secure payments infrastructure. Designing, implementing, and maintaining security architectures to protect sensitive data and ensure compliance with industry standards.

Key Responsibilities:

• Develop and implement comprehensive security strategies for payment system upgrades.
• Conduct detailed risk assessments and define mitigation strategies.
• Design threat models using frameworks such as MITRE ATT&CK and STRIDE.
• Recommend appropriate controls and countermeasures for vulnerabilities.
• Ensure architectural compliance with GDPR, SOX, PCI-DSS, and other relevant standards.
• Implement advanced encryption and access controls for data protection.
• Collaborate with cross-functional teams to embed security seamlessly.
• Ensure proper encryption for data at rest and in transit.
• Communicate security risks and solutions clearly to both technical and non-technical stakeholders.

Key Skills & Experience:

• Proven experience as a Security Architect in large, complex environments.
• Strong background in financial services or other regulated industries.
• Expertise in developing threat models using MITRE ATT&CK and STRIDE.
• Solid understanding of Identity & Access Management (IAM) and associated risks.
• Ability to assess technical designs from a security perspective and provide constructive feedback.
• Familiarity with PCI-DSS, GDPR, and other regulatory compliance requirements.
• Professional certifications such as CISSP, CISM, or equivalent (or working towards).