Information Security Architect

About Us

Our Information & Technology (I&T) Digital Security organisation is on a mission to deliver scalable, flexible, and effective security services that support the evolving needs of our business. We operate as a centralised team, providing strategic security architecture and assurance across all business units, assets, and change initiatives. Our goal is to proactively mitigate threats and reduce risk exposure while enabling innovation and operational excellence.

We value collaboration, visibility, and strong partnerships both internally across I&T and business stakeholders, and externally with our technology partners. Our team is committed to maintaining a secure digital environment that aligns with regulatory requirements and industry best practices.

About the Role

As an Information Security Architect, you will play a key role in shaping and maintaining our enterprise security architecture. You’ll work closely with enterprise architects, functional area specialists, and security experts to ensure that all IT systems and platforms are designed with robust, scalable, and compliant security solutions.

Your responsibilities will include:

  • Developing and maintaining security architectural models, standards, and procedures.

  • Advising on security strategies to manage risks and ensure compliance with internal policies and external regulations.

  • Supporting the creation of reference architectures and artefacts for enterprise security domains.

  • Monitoring emerging technologies and assessing their impact on our security posture.

  • Providing expert guidance to internal teams and stakeholders on security best practices, tools, and frameworks.

  • Identifying vulnerabilities, assessing risks, and developing mitigation strategies.

  • This role involves occasional planned on-site visits to build strong relationships and ensure alignment between security architecture and business objectives.

About You

  • Extensive experience in information security architecture or design within large, distributed enterprise environments.

  • Proficiency with the Microsoft security stack.

  • Proven ability to develop security architecture artefacts and reference models, ideally within the manufacturing sector or similar.

  • Experience working with external service and technology providers across the lifecycle from horizon scanning to operations.

  • Strong interpersonal and communication skills, with the ability to influence and engage stakeholders across technical and non-technical domains.

  • Familiarity with cyber security frameworks such as NIST, ISO-27001, ISF SOGP, and ISMS.

  • Professional certifications such as CISSP, CCSP, TOGAF, or SABSA (advantageous).

  • You bring a collaborative spirit, a proactive approach to risk management, and the ability to translate complex security concepts into actionable insights for diverse audiences.

Benefits

  • Competitive salary

  • Company bonus

  • Pension scheme

  • Life assurance

  • Income protection

  • 25 days holiday plus bank holidays

  • Electric Car / Bike to Work schemes

To fulfil our purpose of redefining packaging for a changing world, we aim to build a diverse, motivated, and engaged workforce. Our goal is to create a culture of inclusion where everyone is treated fairly, differences are valued, and everyone has an equal opportunity to succeed.Our people come from diverse backgrounds, bring different perspectives, ideas, and experiences to generate unique solutions focused on present and future sustainability challenges. We welcome all candidates to apply, even those not meeting all criteria.

#LI-DS

Company
DS Smith
Location
London, South East, England, United Kingdom
Employment Type
Full-Time
Salary
Competitive salary
Posted
Company
DS Smith
Location
London, South East, England, United Kingdom
Employment Type
Full-Time
Salary
Competitive salary
Posted