System Security Architect

Description

The role sits in a bank's change programmes and aims to build secure systems and architecture from the start, covering data security, security risk management, asset security, security architecture and engineering including cloud security, communications and networks, security operations, software development, security assurance testing, and identity and access management.

The team is a control function or security guild that oversees security for technology change.

The company is shaping secure AI across its digital ecosystem and needs someone to protect AI-driven solutions so they stay secure, compliant and resilient against changing threats. The work spans generative AI, cloud security and data protection across transformative initiatives.

This is an Assistant Vice President level role.

Responsibilities

• Run security risk assessments and build threat models throughout the change and development lifecycle to find weaknesses in IT systems, applications and infrastructure, and make sure compensating controls and countermeasures are built in to strengthen defences against cyber threats.
• Report key findings and recommendations to stakeholders in a timely way.
• Support DevSecOps and shift-left practice by giving customers and stakeholders a route to bring security questions early, including on business plans and technology change designs.
• Shape security strategy with senior stakeholders in the COO and CSO functions so the business and technology can evolve.
• Review security of prospective third-party technology products and services for the CISO, CIO and product teams.
• Move residual risk to the business or customer where the enterprise risk management framework requires it.
• Work with stakeholders and IT teams on incident response and investigations, sharing security insight drawn from your knowledge of the technology estate.
• Help develop and maintain security policies, standards and procedures that match the bank's risk tolerance, regulatory obligations and industry good practice.
• Advise on decisions, contribute to policy, and own the operational effectiveness of your area, working closely with other functions and business divisions.
• Lead a team on complex work that affects the whole business function: set objectives, coach people, review performance against them and decide reward outcomes.
• If you manage people, show the four LEAD behaviours: listen and be authentic, energise and inspire, align across the enterprise, and develop others.
• If you work as an individual contributor, lead collaborative assignments, bring in other specialisms where needed, and propose new directions and cross-functional methods to reach outcomes.
• Advise people leaders on escalated, complex issues.
• Find ways to reduce risk and write new policies and procedures that support control and governance.
• Own the risk management and control strengthening for your work.
• Analyse complex data from internal and external sources, including procedures and practices from other teams and companies, to solve problems creatively.
• Explain complex or sensitive information clearly to audiences who may find it hard to follow.
• Persuade stakeholders to reach agreed outcomes.
• Demonstrate the bank's values of Respect, Integrity, Service, Excellence and Stewardship, and its mindset to Empower, Challenge and Drive.

Requirements

• Experience designing and reviewing AI security architecture and solutions to ensure secure-by-design implementation.
• Strong knowledge of threats to generative AI, LLMs and agentic AI, such as prompt injection, model misuse and data leakage.
• Deep expertise in cloud, SaaS and data protection security across modern platforms.
• You may be assessed on critical skills for the role, such as risk and controls, change and transformation, business acumen, strategic thinking, digital and technology, and job-specific technical skills.

Conditions

The role is based in Knutsford, Manchester or Glasgow.

Equal-opportunity statement not included in source.