Cyber Security Architect – Security Architecture & Threat Modelling

About the role

The Cyber Security Architect will join the CISO Security Architecture Team to provide independent security architecture assurance across a portfolio of national digital health and large‑scale technology programmes. Working under the Security Architecture Lead, the role is delivery‑facing and will flex across multiple active programmes, reviewing designs, conducting threat modelling and offering practical security guidance.

Key responsibilities

• Review proposed architectures, designs and supplier solutions to ensure security requirements and controls are addressed.
• Conduct structured security architecture reviews of solution designs, integrations and artefacts, delivering written and verbal findings.
• Produce clear, proportionate security recommendations to support secure design and implementation decisions.
• Support the development of high‑level and low‑level designs for applications, cloud services, infrastructure, integrations and identity solutions.
• Perform threat modelling, vulnerability analysis and technical risk assessments across programme systems and supplier dependencies.
• Identify design weaknesses, control gaps and recommend mitigation measures.
• Monitor the relevant threat landscape and advise on actions to maintain a defensible security posture.

Required profile

• Current, hands‑on experience in security architecture within complex, large‑scale digital programmes.
• Ability to work across multiple programmes, reviewing technical artefacts and providing practical guidance.
• Experience delivering security reviews and threat‑modelling activities for cloud, infrastructure and identity solutions.
• Familiarity with regulatory frameworks such as NIS2, GDPR and the Cyber Resilience Act.

Required skills

• Security architecture design and validation
• Threat modelling
• Vulnerability analysis
• Technical risk assessment
• Cloud security concepts
• Identity and access management (IAM) security