Head of Security Architecture

We’re looking for a Head of Security Architecture to be the strategic authority for security‑by‑design across Digital. Reporting to the Chief Information Security Officer, this role leads the definition, development and execution of our security architecture strategy, ensuring that all platforms, technologies and services are designed, delivered and operated securely. As a key member of the Digital Extended Leadership Team, you’ll provide influential leadership on security risk, architectural direction and the secure enablement of our digital ambitions — balancing innovation with resilience in a complex, critical‑infrastructure environment.

• Own, define and continuously evolve the Security Architecture Strategy and its supporting frameworks.
• Embed secure‑by‑design principles across Digital, ensuring security requirements are incorporated through delivery and into operations.
• Lead the development, governance and optimisation of security controls across all programs, [and support elsewhere], ensuring they are effective, measurable and aligned to recognised industry frameworks and regulatory expectations, which are in turn, mapped to internal Information Security Standards.
• Oversee the integration of threat modelling, risk assessment and secure design principles into Digital programmes, projects and service life cycles.

• Act as a senior strategic advisor within the Extended Leadership Team, advocating for security informed decision making and helping shape Digital’s technology direction.
• Build strong relationships with Enterprise Architecture, Enterprise Security Architecture, Engineering, Delivery, Operations and business leaders to ensure security architecture is understood, adopted and aligned to organisational objectives.
• Provide architectural steer and security assurance into major transformation initiatives, technology roadmaps, procurement activity and third‑party engagements.

• Ensure technical standards align to and address Information Security and Cyber requirements, controls and strategy
• Support and guide the development and maintenance of security architecture patterns, standards and reference models.
• Support and guide the evaluation and selection of security technologies, ensuring they integrate effectively into the wider architecture landscape.
• Ensure the organisation’s security architecture remains current with evolving threats, technologies and industry practices.

• Oversee and enhance processes for risk‑based architecture decision making, ensuring transparency and accountability across Digital.
• Drive the assessment of control effectiveness and lead architectural strategies to address control gaps, vulnerabilities and emerging threats.
• Partner closely with Information Security Governance, Cyber Operations, Security Engineering and other teams to provide holistic risk visibility across Digital services.

• Lead, mentor and inspire the security architecture team, cultivating technical excellence, critical thinking and a collaborative culture.
• Demonstrate visible personal leadership, modelling the behaviours expected across Digital and championing a mature, business aligned security culture.
• Build capability across Digital by promoting knowledge sharing, architectural consistency and secure design thinking.

• Proven leadership in security architecture within a complex enterprise environment
• Experience in critical infrastructure, utilities or the public sector
• Deep, holistic knowledge of cyber / information security
• Strong understanding of secure design, threat modelling, cloud and on‑prem architectures, identity platforms
• Demonstrated ability to influence senior stakeholders and lead teams

• Strong familiarity with frameworks such as NIST,…