Security Solution Architect

Job Description

Security Solution Architect

Location: London (Hybrid)

Practice: Technology & Security – Albany Beck

Deployment: Immediate placement with a globally recognised Insurance client

About Albany Beck

Albany Beck are a Management Consultancy focused on providing specialist talent and transformative solutions to Financial Services clients. We combine subject matter expertise with innovative delivery models that help clients scale efficiently, while offering meaningful, long-term career opportunities to our people. At Albany Beck, you’ll be choosing to work with an organisation that’s passionate about your learning journey and committed to your professional career and personal development.

The Role

We are seeking an experienced Security Solution Architect to join our Technology & Security Practice, with an immediate deployment to one of the world’s most globally recognised insurance organisations. The Security Solution Architect will be responsible for translating business requirements into secure, scalable, and compliant solution designs, supporting the realisation of the client’s target Enterprise Security Architecture state. This role combines strong security expertise with technical solution design capability, producing end-to-end architectures that underpin major Security Transformation Programmes. You will act as a trusted advisor across security domains, influencing strategy and embedding robust security principles into enterprise-wide initiatives.

Key Responsibilities

• Develop high-quality security solution architectures and supporting design documents for transformation programmes.
• Work closely with Enterprise Security Architects to ensure alignment with strategy, standards, and architectural patterns.
• Ensure solution designs meet defined business requirements, compliance policies, and customer expectations.
• Partner with CIO, CDO, and CISO functions to ensure solutions comply with technology, architectural, and security standards.
• Define and embed appropriate security controls within solution designs to mitigate threats and manage risk.
• Influence and promote the adoption of security architecture principles across programmes and teams.
• Participate in governance forums, ensuring architectural decisions and key attributes are captured and reported.
• Collaborate with the Lead Security Architect and wider client security teams to align with strategic direction and operational needs.
• Support the continuous improvement of the Security Architecture service through effective workflow, escalation handling, and governance adherence.

Key Skills & Experience

• Ability to conceptualise, develop, and author end-to-end IT security architectures across multiple views (application, technology, data, and security).
• Apply structured approaches to real-world security challenges, ensuring solutions meet business outcomes.
• Proven experience applying methodologies (e.g. STRIDE, DREAD) to inform risk-based design decisions.
• Ability to explain security concepts and risks clearly to both technical and non-technical stakeholders; strong influencing and consensus-building skills.
• Experience leveraging frameworks and re-usable architecture building blocks to guide design and transition states.
• Ability to interpret and apply policies, standards, and regulations within transformation contexts.

Experience Required

• Broad expertise in enterprise security architecture, with deep knowledge across at least two or more domains (e.g. network, endpoint, data, application, operations, workload security).
• Expert-level knowledge in at least one security architecture domain, with demonstrable leadership of technical elements in transformation projects.
• Strong understanding of security capabilities such as firewalls, IDS/IPS, network segmentation, and access controls.
• Hands-on experience with operating systems (Windows, Linux, UNIX) and their security requirements.
• Proven experience with cloud security architecture; direct Azure expertise , AWS and GCP experience beneficial.
• Strong knowledge of security frameworks and standards (e.g. NIST 800-53, ISO 27001/27002, CSA CCM/CIAQ, MITRE).
• Developed understanding of the cyber threat landscape and ability to apply threat modelling approaches.
• Experience working with Enterprise Risk Management frameworks, risk assessments, and standards compliance processes.