Head of Security Architecture

As we continue to evolve and grow, our commitment to security and digital transformation remains at the forefront of our strategy. We are seeking a dynamic and experienced Head of Security Architecture to lead our security architecture team and drive the security technology strategy that underpins our cyber security posture and digital transformation initiatives.

The Head of Security Architecture will be responsible for the strategic leadership and management of the Security Architecture and Product Security team. This role will have a significant impact on shaping the security technology strategy and roadmap, ensuring alignment with the company’s overall business objectives and cyber security requirements. The role requires a seasoned professional with a deep understanding of security architecture, exceptional leadership skills, and the ability to engage effectively with stakeholders across three Chief Technology Offices (CTOs) and the CISO function.

What you will be doing

1. Leadership and Team Management: Lead, mentor, and develop a team of specialist security architects and product security specialists, fostering a culture of excellence, innovation, and continuous improvement.
2. Security Technology Strategy and Roadmap: Own and drive the security technology strategy and roadmap, aligning it with the company’s digital transformation goals and cyber security posture. Ensure that security architecture principles are integrated into the technology landscape.
3. Stakeholder Engagement: Act as the primary liaison between the Security Architecture team, the three Chief Technology Offices, and the CISO function. Develop and maintain strong relationships with key stakeholders to ensure alignment and support for security initiatives.
4. Architecture Governance: Develop and maintain security architecture standards, frameworks, and guidelines. Oversee the implementation of security controls and ensure compliance with regulatory requirements and best practices.
5. Digital Transformation Support: Collaborate with digital technology teams to embed security into the digital transformation initiatives, ensuring that new technologies and services are securely designed and implemented.
6. Threat Modelling and Risk Management: Oversee the identification, assessment, and management of security threats across the organisation’s technology projects, programmes and landscape. Develop strategies to counter threats, mitigate risks and enhance the organisation’s security posture.
7. Innovation and Continuous Improvement: Stay current with emerging security technologies and trends. Drive innovation within the Security Architecture team by exploring new approaches, tools, and technologies that can enhance the company’s security capabilities, in collaboration with the CISO leadership Heads.
8. Budget and Resource Management: Manage the budget and resources for the Security Architecture team, ensuring optimal allocation to meet strategic objectives and business constraints.
9. Reporting and Metrics: Develop and present regular reports and metrics on the status of the security architecture, highlighting achievements, challenges, and areas for improvement.

About you

1. Proven Leadership Experience: At least 8-10 years of experience in a senior security architecture role, with a minimum of 5 years in a leadership position managing a team of security professionals.
2. Security Architecture Expertise: Deep understanding of security architecture principles, frameworks (such as SABSA, TOGAF, or NIST), and methodologies. Experience with cloud security, application security, network security, and data protection.
3. Stakeholder Engagement: Demonstrated ability to engage and influence senior stakeholders across technology, security, and business functions. Strong communication and negotiation skills.
4. Strategic Vision: Ability to develop and execute a security technology strategy that supports both the business and technology objectives. Experience with aligning security strategies with digital transformation efforts.
5. Technical Knowledge: Strong technical background with knowledge of a broad range of security technologies, including firewalls, intrusion detection systems, encryption, identity and access management, and vulnerability management tools.
6. Regulatory and Compliance Awareness: Familiarity with financial services regulations (e.g., GDPR, FCA, PRA) and experience in implementing security controls to meet compliance requirements.
7. Analytical and Problem-Solving Skills: Strong analytical skills with the ability to assess complex security challenges and develop effective solutions.
8. Innovation and Adaptability: Ability to stay current with the latest security trends, combined with experience of working in a product-oriented setup and adapt to a rapidly changing threat landscape.
9. Education and Certifications: Graduate degree in Information Security, Computer Science, or a related field. Industry certifications such as CISSP, CISM, or CCSP are highly desirable.

Interview process

Will entail a 3-stage interview process, including competency based questions, presentation and an edgecumbe assessment.

Working schedule

This is a full time, permanent role covering 37.5 hours per week. The role is based in Bristol, BS1 5HL. Hybrid / Remote working and flexibility is available and open for discussion. Minimum of 1 trip to Bristol per month.

Why us?

Here at HL, we’re the UK’s number 1 investment platform for private investors, based in Bristol. For more than 40 years we’ve helped investors save time, tax and money on their investments.

To achieve our mission, we believe we have a workplace like no other, with constant learning, dynamic teams, and a great ethos. We’re steered by core values that promote service, quality, innovation, and opportunity in everything we do.

What’s on offer?

• Discretionary annual bonus* and annual pay review
• 27 days* holiday plus bank holidays and 1-day additional Christmas closure
• Option to purchase an additional 5 days holiday**
• Flexible working options available, including hybrid working
• Enhanced parental leave
• Pension scheme up to 11% employer contribution
• Sharesave scheme – have a real stake in HL’s future
• Income Protection and Life insurance (4 x salary core level of cover)
• Private medical insurance*
• Health care cash plans – including optical, dental, and outpatient care
• Help@hand – confidential support including mental health counselling and remote GP
• Wellhub – unlimited access to fitness providers and wellness coach sessions
• Variety of travel to work schemes with bike storage and shower facilities
• Inhouse barista and deli serving subsidised coffee and sandwiches
• Two paid volunteering days per year

* dependant on role level

** only available to select during our annual benefits window, in November each year

Hargreaves Lansdown is an inclusive employer that values diversity in its workforce. We encourage applications from all individuals without regard to race, religion, gender, sexual orientation, national origin, disability or age.

This role may also be available on a flexible working or part time basis – please ask the Recruitment & Onboarding team for more information.

Please note, we are unable to provide employment sponsorship to candidates.