Expert Associate Partner, Architecture (Cybersecurity

Job

108771

Work Areas

Management Consulting, Technology & Engineering

Employment Type

Permanent Full-Time

Location(s)

London

WHAT MAKES US A GREAT PLACE TO WORK

We are proud to be consistently recognized as one of the world’s best places to work. We are currently the top-ranked consulting firm on Glassdoor’s Best Places to Work list and have earned the #1 overall spot a record seven times. Extraordinary teams are at the heart of our business strategy, but these don’t happen by chance. They require intentional focus on bringing together a broad set of backgrounds, cultures, experiences, perspectives, and skills in a supportive and inclusive work environment.

We hire people with exceptional talent and create an environment in which every individual can thrive professionally and personally.

WHO YOU'LL WORK WITH

You will join the Architect experts within the Enterprise Technology team, part of Bain’s digital capabilities practice. This is a multidisciplinary group that helps clients modernise their security strategy, architecture, and programmes. The work centres on aligning cybersecurity with business goals, and in practice that means designing enterprise-wide security architectures, shaping operating models, managing cyber risk, and embedding security into digital and cloud transformations.

WHERE YOU’LL FIT WITHIN THE TEAM As an Expert Associate Partner, Architecture (Cybersecurity), you will be a senior security architect within the practice, leading architecture engagements for our largest clients. The role calls for deep technical security expertise, hands‑on client advisory experience, and the ability to build and articulate a credible cybersecurity point of view.

WHAT YOU'LL DO

• Own cybersecurity architecture work streams within large client transformation programmes.
• Design and deliver security architectures across cloud, hybrid, OT, and legacy environments.
• Work directly with CISO, CIO, and programme sponsors to shape security strategy and earn their confidence as a technical peer.
• Sit on the project leadership team and represent security across business and technology work streams.
• Manage and direct teams of architects and consultants day‑to‑day.
• Produce as‑is/to‑be security architecture documentation, risk assessments, and migration artefacts.
• Identify client opportunities, develop security‑focused points of view, and support account expansion.
• Understand what clients are wrestling with, technically and commercially, so that architectural recommendations land in context.
• Run multi‑million security transformation programmes independently, from scoping through to delivery.
• Coach and develop more junior architects and consultants on the team.
• Stay current on the vendor landscape and bring that knowledge back to shape Bain's security offerings.
• Review security architectures and vendor proposals on behalf of clients, stress‑testing assumptions and providing an independent view

ABOUT YOU

• 15+ years in cybersecurity, with time spent in both hands‑on technical roles and broader strategic ones.
• T- or U‑shaped: genuine depth in at least one domain (cloud security, IAM, SOC, or similar) and enough breadth to hold a conversation across the full landscape.
• Experienced in designing and delivering security architecture inside large, complex organisations, not just advising on it.
• Comfortable running client workshops, presenting to boards, and writing for executive audiences.
• Able to discuss security strategy directly with a CIO or CISO, including operating model, risk appetite, and programme design, not just technical architecture.
• Experience outside pure architecture: operating model design, capability building, cyber programme definition, or security governance.
• Works well in ambiguous situations and can bring structure to a client problem that has none.
• Familiar with the major frameworks (NIST CSF, ISO 27001, SABSA, MITRE ATT&CK, NIS2) and able to apply them selectively rather than wholesale.
• Cloud platform experience across at least two of Azure, AWS, and GCP, including hybrid architectures.
• Able to translate a technical vulnerability into a financial or operational risk statement that a CFO or board…