Senior Security Architect - AI & Enterprise Security
Job Description
[Up to c. $500k Comp Package | Office-Led Working]
Role Overview
We're representing an established international commodities trading and investment organisation seeking a senior, hands-on security architect to strengthen its enterprise cybersecurity capabilities. Working within a lean internal security function, this individual will help move the organisation towards a more preventative, automated and intelligently governed security model, with less dependence on traditional monitoring and incident response. A central priority is securing the organisation's growing use of generative AI, developer assistants and autonomous agents. This includes establishing stronger visibility, access controls, data protections and enforcement capabilities, alongside broader improvements across identity, cloud infrastructure, endpoint security and enterprise information governance.
Working closely with the CISO, you'll have significant influence over security architecture, technology selection and implementation priorities, while remaining personally involved in technical delivery...
Role Snapshot
- Bring substantial cybersecurity engineering and architecture experience, typically 9+ years, with a record of implementing enterprise security controls rather than operating exclusively in advisory or governance positions
- Partner directly with the CISO to establish security architecture priorities, evaluate technologies and deliver improvements across the organisation's existing infrastructure and applications
- Develop governance and technical security controls for enterprise AI platforms, developer assistants and autonomous agents, including agent identities, permissions, approved usage and centralised oversight
- Assess AI gateways and runtime security capabilities to address prompt injection, unmanaged accounts, unauthorised AI services, information leakage and emerging agentic security risks
- Advance Microsoft Purview capabilities across data classification, DLP, information protection and insider risk, establishing consistent safeguards for sensitive business information
- Strengthen hybrid identity and Zero Trust architecture using Active Directory, Microsoft Entra ID, Conditional Access, privileged access management, device trust and identity verification controls
- Improve security across AWS, selected Oracle Cloud workloads, Microsoft 365 and managed endpoints, drawing on practical experience with EDR/XDR, cloud posture management and vulnerability remediation
- Evaluate and implement secure access technologies, including SSE/SASE, endpoint application controls and protections against unmanaged devices accessing corporate resources
- Expand preventative security automation, SIEM/SOAR integration, security posture management and resilience controls, translating technical risks into measurable engineering improvements
- (Preferred) Experience securing AI-enabled enterprise environments or working within financial services, commodities trading or similarly technology-intensive organisations where security teams operate with considerable individual ownership
...
Apply for this role
All fields marked with * are required.