Security Solutions Architect

Select how often (in days) to receive an alert:

Business Unit:
Discovery Central Services

Function:
Information Security

Date: 20 Oct 2026

About Discovery

Discovery’s core purpose is to make people healthier and to enhance and protect their lives. We seek out and invest in exceptional individuals who understand and support our core purpose, and whose own values align with those of Discovery. Our fast-paced and dynamic environment enables smart, self-driven people to be their best. As global thought leaders, Discovery is passionate about innovating in order to not only achieve financial success, but to ignite positive and meaningful change within our society.

About Information Governance and Security (IGS)

The Information Governance and Security function within the Discovery Group aims to provide assurance that the organisation’s information assets are adequately protected against threats on a continual basis. This is achieved by finding the right balance of information security and business freedom.

Key Purpose

The Cloud Security Architect is responsible for defining, governing, and guiding secure cloud architectures across the organisation, with Google Cloud Platform (GCP) as the primary strategic platform, while maintaining strong security and architectural oversight across AWS, Azure, and hybrid on-premises environments.

The role combines security architecture ownership, cloud security consulting, and engineering oversight. Acting as a trusted technical advisor, the Cloud Security Architect supports teams in securing existing cloud platforms, leads the secure onboarding of new cloud environments, and ensures security is embedded by design across all cloud initiatives.

The primary accountability is security architecture, design architect, and enablement, rather than day-to-day platform operations. Hands-on engagement is expected where required to validate designs, assess risk, and guide secure implementation.

Areas of responsibility may include but not limited

Cloud Security Architect

• Participate in development of information governance and privacy strategy in support of business objectives and arising risks with particular focus on information governance and privacy capabilities, operational and service excellence.
• Define and own cloud security architecture standards.
• Design and review secure GCP, AWS and Azure landing zones, aligned to:
  • Identity-driven security architectures with continuous access evaluation
  • Granular, risk-based access controls and privilege management
  • Enforcement of security controls through native cloud services, organisational policies, and approved reference architectures
• Act as design architect for GCP security architectures, ensuring consistency, scalability, and risk alignment.

Core Security Architecture & Dev Sec Ops

• Define enterprise cloud security baselines aligned to ISO 27001, NIST CSF, and CIS Benchmarks.
• Guide Zero Trust architectures and security monitoring patterns.
• Provide architectural oversight for Dev Sec Ops  and secure software supply chains, including:
  • Secure CI/CD patterns
  • Automated security scanning and policy enforcement
  • Container, workload, and artefact hardening
  • Infrastructure-as-Code (IaC) architecture and practices
• Apply cloud-agnostic security principles across GCP (primary), AWS, and Azure.
• Consult and guide security architectures for:
  • Existing cloud environments
  • New cloud onboarding initiatives
  • New services to be deployed and activated in any of the clouds
• Define secure connectivity patterns between cloud platforms and on-premises environments.
• Support consolidation and rationalisation of cloud accounts, subscriptions, projects, and tenants.

Infrastruct…