UKCSC Chartered/Principal Advisor - Security Architect

UKCSC Chartered/Principal Enterprise Advisor (Security Architect)

• Contract (associate/project-by-project)
• UK-based
• Predominantly remote with occasional client-site travel (as agreed)

Overview

We're partnering with an independent UK cyber security advisory and assurance organisation supporting mid-market, enterprise and regulated clients. They are expanding their associate panel with senior Security Architecture professionals to deliver independent architecture assessment, assurance, and board-level advisory on complex environments.

Critical Requirement (must-have)

To be considered, you must hold current UK Cyber Security Council (UKCSC) professional registration in Security Architecture (Secure System Architecture and Design) at Principal or Chartered level.
This requirement is mandatory and will be verified. Applications without it will not be progressed.

What you'll do (typical engagements)

• Lead independent security architecture reviews and assurance for large, complex and/or regulated organisations.
• Assess cloud, hybrid and on-prem architectures across identity, networks, applications, platforms and data.
• Perform threat modelling to identify credible attack paths, design weaknesses, and control gaps.
• Evaluate whether proposed controls (or alternatives) provide equivalent, proportionate protection.
• Review high-level and detailed designs, challenging unsupported assumptions.
• Advise boards, executives, and technical teams on secure-by-design decisions and trade-offs.
• Produce clear, defensible, client-ready findings and assurance reports.
• Complete scheme-specific training and participate in quality reviews when required.

What we're looking for

You should also have:

• Significant experience operating as a hands-on security architect in large/complex or regulated environments.
• Strong command of secure-by-design, architecture assurance, and threat modelling.
• Practical depth across cloud and hybrid infrastructure, IAM, network security, application security, and data security.
• Excellent written English with the ability to communicate technical risk clearly to non-technical stakeholders.

Nice to have (not a substitute for UKCSC registration):

• SABSA, TOGAF, CISSP, CCSP, and/or relevant cloud certifications.

Contract/working requirements

• Must be UK-based
• Able to attend UK client sites when agreed
• Able to contract via a limited company or another compliant arrangement

What to submit

• CV and LinkedIn profile
• Your UKCSC registration details (specialism, level, and registration number or public profile link)
• Location and availability
• Contact information so I can call you
• One example of a complex enterprise security architecture you personally designed or assured
• Relevant qualifications (architecture, assurance, security)

Disclaimer: Any remuneration stated in this advertisement is indicative and will be dependent on the successful candidate's experience, skills and qualifications. Final remuneration will be agreed with the successful candidate and will be subject to the terms of the contract.