£500 per day (Inside IR35)
Fully Remote (UK Based)
Initial 6-Month Contract
We are looking for an experienced Senior Security Architect to support a large-scale ERP transformation programme within a complex and highly regulated environment. This is an excellent opportunity for a senior security professional to lead security assurance activities, challenge supplier designs, and ensure solutions are secure by design across a major business-critical programme.
The Role
As the Senior Security Architect, you will provide security leadership and architectural assurance across the implementation of a new ERP platform and associated integrations. You will work closely with programme stakeholders, suppliers, and architecture teams to ensure security, privacy, identity, and access management requirements are Embedded throughout the delivery life cycle.
Key Responsibilities
- Review and assure supplier High-Level Designs (HLDs), Low-Level Designs (LLDs), functional and non-functional designs from a security perspective.
- Define and oversee security controls, identity integration, and access management models.
- Establish and maintain the programme security framework and security-by-design approach.
- Review supplier security certifications, threat assessments, risk assessments, and mitigation plans.
- Support and assure Data Protection Impact Assessments (DPIAs), privacy controls, and information governance requirements.
- Define and oversee penetration testing and vulnerability management activities.
- Monitor implementation of identity, access control, privileged access, and role-based access models.
- Participate in design reviews, governance forums, architecture boards, and programme assurance activities.
- Provide clear security advice and risk assessments to both technical and non-technical stakeholders.
Essential Experience
- Proven experience working as a Security Architect, Information Security Consultant, or Security Assurance Lead.
- Experience delivering security architecture on large digital transformation or ERP programmes.
- Strong background in supplier assurance and reviewing third-party security designs.
- Experience within regulated, enterprise, or public-sector environments.
- Strong understanding of identity and access management, privileged access management, and security governance.
- Experience managing security risks throughout the solution life cycle.
- Experience governing penetration testing and vulnerability assessment activities.
Technical Knowledge
- Security architecture frameworks and security-by-design principles.
- Microsoft 365, Entra ID, Azure and AWS security architectures.
- Cloud security across SaaS, PaaS and IaaS environments.
- Identity and Access Management (IAM) and Role-Based Access Control (RBAC).
- NIST, ISO27001, CIS Controls, and NCSC security frameworks.
- UK Data Protection and information security requirements.
Desirable
- ERP programme experience.
- Experience with Entra ID authentication and SSO implementations.
- Knowledge of security considerations around integrations and APIs.
- Familiarity with UK public-sector security standards and governance models.
Contract Details
- Role: Senior Security Architect
- Rate: £500 per day
- IR35: Inside IR35
- Location: Fully Remote (UK Only)
- Duration: Initial 6 months
- Start: ASAP
This contract is ideal for a senior security architect who enjoys combining hands-on security expertise with architecture governance, supplier assurance, stakeholder management, and strategic security leadership on large-scale transformation programmes.
