Security Architect

Southern Water is recruiting for the role of Security Architect. The Security Architect will define and assure secure architecture across applications, infrastructure, cloud, data, integration and OT environments. The role also embeds secure-by-design principles, translates policy and standards into practical designs, and advises on security risks and requirements.

Role details

• Location: Worthing
• Job type: Full time
• Closing date: 30/09/2026

What you’ll do

• Define and assure security architecture for new and evolving solutions across multiple environments.
• Embed secure-by-design principles into technology design and delivery processes.
• Translate policy, standards and risk appetite into practical designs and patterns.
• Identify and advise on security risks, with mitigation or formal acceptance.
• Provide expert guidance to architecture forums, governance boards and design authorities.
• Support solution architects and engineering teams with security and non-functional requirements.
• Lead or contribute to threat modelling, vulnerability assessments and penetration testing.

What they’re looking for

• Experience designing and assuring secure solutions across Azure, on-premise and hybrid environments.
• Knowledge of frameworks such as NCSC guidance, NIST CSF/800-53, ISO 27001/2 or SABSA.
• Understanding of identity and access management, network security, encryption, API security and secrets management.
• Experience with vulnerability management, penetration testing and security assurance processes.
• Ability to define, document and govern security requirements throughout solution delivery.
• Familiarity with secure operation, monitoring, logging and incident response integration.

Additional role information

• The role involves occasional travel across Southern Water sites and operational locations.
• It includes participation in governance and design authority forums.
• It involves engagement with both IT and OT stakeholders in regulated and safety-critical environments.