[Hiring] Security Architect @Atos

Role Description

We are seeking a Security Architect to join the BPS Security Architecture & Assurance (Security Governance) capability within highly regulated UK Government and financial services environments. Working across complex, business-critical platforms and alongside other Security Architects and Assurance Managers, you will ensure security is embedded by design and evidenced throughout delivery.

This role is focused on judgement, influence and risk-based decision-making, balancing security, business and operational priorities to deliver defensible architecture, assurance outcomes and risk assessments that will withstand client and audit scrutiny.

The successful candidate will provide security architecture oversight and assurance across client programmes, projects, services and third-party suppliers within complex enterprise and regulated environments.

The role is responsible for determining whether proposed solutions, designs and services meet organisational security requirements, regulatory obligations and good industry practice. The role does not design or implement technical solutions. Instead, it provides independent review, governance, risk assessment, and security approval activities throughout the solution lifecycle.

Core Responsibilities

• Security Governance: Participate in Architecture Review Boards and provide review/security sign-off in line with governance requirements.
• Security Governance: Define and enforce secure architecture standards, reference patterns, and mandatory security controls.
• Security Architecture Assurance: Review/approve security-relevant designs and major technical changes.
• Security Architecture Assurance: Act as a security design authority across infrastructure, platforms, and applications.
• Security Architecture Assurance: Conduct independent security architecture reviews and assess designs against security standards, policies and control frameworks.
• Security Risk Management: Perform security risk assessments (to identify vulnerabilities), threat assessments, and support risk treatment decisions.
• Supplier and Cloud Assurance: Assess third-party suppliers, SaaS platforms and cloud services using assurance evidence and independent testing reports.
• Compliance and Regulatory Assurance: Ensure alignment with NIST CSF, NCSC guidance, CIS Controls, ISO/IEC 27001, UK GDPR, UK Gov. Security Classifications.
• Security Assurance: Coordinate and support IT Health Checks (ITHCs), ensure findings are reviewed, risk-assessed, and remediated through appropriate governance processes.
• Security Advisory: Provide pragmatic security guidance and act as a trusted adviser to delivery and business stakeholders.

Qualifications

• Significant experience within information security, cyber security, information security architecture, or DevOps.
• Experience providing security assurance, architecture reviews, or governance oversight.
• Strong understanding of security risk management and security control frameworks.
• Experience reviewing cloud, SaaS and enterprise technology architectures.
• Excellent stakeholder management, communication, and influencing skills.

Desirable Certifications/Qualifications

• CCSP.
• CISSP.
• CISM.
• Architecture Methodology e.g. Unified Engineering Methodology (UEM), TOGAF Foundation, SABSA.
• ISO 27001.
• Professional awarded qualifications.

Requirements

This role is UK-based and offers a remote working opportunity, with occasional UK domestic travel as required.

To be eligible for SC clearance, you must have lived and worked in the UK continuously for the past 5 years.

Benefits

• Pension Scheme - contributions matched up to 10%
• Private medical cover
• Income Protection
• Life Assurance
• 25 days paid leave + National Holidays
• Flex benefits program