Lead cybersecurity architecture and engineering across identity, cloud, data, endpoints, applications, networks, and third-party services. Design and validate Zero Trust controls, conduct architecture reviews and threat modeling, oversee detection and incident response, improve vulnerability management, and secure AI technologies including Microsoft 365 Copilot and AI agents. Automate security processes, support compliance obligations, advise senior stakeholders, and coach technology teams in secure engineering practices.
We are looking for a senior, hands-on Cyber Security Architect & Engineering Lead to help shape and strengthen our future security architecture at Moore Kingston Smith.
This is a technical leadership role, sitting within our Information Security team and reporting to the Head of Information Security. You will be responsible for translating security strategy and business requirements into secure designs, practical controls, technical standards and measurable outcomes.
This is not a purely advisory or compliance-focused position. We are looking for someone who can design, prototype, configure, guide implementation and validate the effectiveness of security controls across identity, cloud, data, endpoints, applications, networks and third-party services.
A key part of the role will be helping the firm adopt AI and emerging technologies securely, including Microsoft 365 Copilot, AI agents, custom AI applications and data-driven platforms.
This is a technical leadership role, sitting within our Information Security team and reporting to the Head of Information Security. You will be responsible for translating security strategy and business requirements into secure designs, practical controls, technical standards and measurable outcomes.
This is not a purely advisory or compliance-focused position. We are looking for someone who can design, prototype, configure, guide implementation and validate the effectiveness of security controls across identity, cloud, data, endpoints, applications, networks and third-party services.
A key part of the role will be helping the firm adopt AI and emerging technologies securely, including Microsoft 365 Copilot, AI agents, custom AI applications and data-driven platforms.
Key Responsibilities
- Define and maintain security architecture across identity, endpoints, networks, cloud, SaaS, data, applications and integration platforms.
- Design and implement modern security controls, with a strong focus on Zero Trust, secure-by-design principles and automation.
- Lead security architecture reviews and threat modelling for major projects, new products, high-risk integrations and emerging technologies.
- Act as the technical lead for AI security, helping to establish practical controls for Microsoft 365 Copilot, AI agents, custom AI applications and related technologies.
- Provide senior technical oversight across security monitoring, detection engineering, incident response and recovery capability.
- Lead or support the response to complex or high-severity security incidents, working with internal teams, external SOC providers and specialist partners.
- Improve vulnerability and exposure management, using business risk, exploitability, attack-path context and threat intelligence to prioritise remediation.
- Support the technical implementation and evidence required for ISO 27001, Cyber Essentials Plus, client assurance and other regulatory or contractual obligations.
- Provide clear, risk-based technical advice to senior leaders, project teams and technology owners.
- Coach technology teams in secure design and engineering practices, helping to build security capability beyond the core security team.
What we’re looking for
We are looking for someone with demonstrable experience in cyber security architecture, security engineering or a closely related senior technical security role.
You will need:
You will need:
- Strong experience designing and implementing security controls in a Microsoft-centric environment, including Microsoft 365, Entra ID, Defender XDR, Sentinel, Azure and Microsoft Purview.
- Strong knowledge of identity security, Zero Trust, cloud security, data security, endpoint security, network security, application security, API security and secure software development.
- Experience of security architecture review, threat modelling, technical standards, reference architecture and control design.
- Practical experience across incident response, detection engineering, threat hunting, vulnerability or exposure management and security automation.
- Ability to automate security and assurance processes using tools such as Python, PowerShell, Logic Apps, Azure Functions, APIs, infrastructure as code or equivalent platforms.
- Working knowledge of ISO 27001, Cyber Essentials Plus, NIST CSF and recognised AI security or governance frameworks.
- The ability to explain complex technical risk clearly to senior stakeholders and influence delivery teams without relying on formal authority.
- A practical, outcome-focused approach, with a track record of taking ownership, improving controls and validating that they work effectively.
Experience in a regulated, client-confidential or professional services environment would be advantageous.
Desirable certifications
Relevant certifications would be beneficial, such as:
Desirable certifications
Relevant certifications would be beneficial, such as:
- Microsoft Certified: Cybersecurity Architect Expert, SC-100
- CISSP or CCSP
- Microsoft security certifications such as AZ-500 or SC-200
- GIAC certifications in incident response, cloud, detection or forensics
- ISO 27001 Lead Implementer or Lead Auditor
- Architecture or threat-modelling accreditation such as SABSA, TOGAF or equivalent practical experience
You will be a practical problem-solver who is comfortable moving between architecture, configuration, testing and stakeholder engagement. You’ll be confident challenging outdated controls and practices, while staying pragmatic, commercially aware and focused on business outcomes.
You’ll also be calm under pressure, collaborative in your approach and able to build trust with both technical and non-technical teams.
If interested please download the full job spec.
Job Benefits
About
At Moore Kingston Smith, we believe in the potential of people to make a positive impact, fuelled by the power of genuine understanding. Working with small, medium and large clients, we are a multi-disciplinary advisory, tax and audit firm with expertise across multiple sectors, uniquely positioned to help people realise their ambitions. Our London and regional teams deliver quality results locally and nationally, and worldwide alongside the Moore Global network. Through respect, collaboration and active listening, understanding is at the heart of everything we do with our clients, colleagues and communities. We value people and projects that promote positive change for the future. Come and join us to make a difference.
Similar Jobs
eCommerce • Fashion • Retail • Sales • Wearables • Design
Assist customers with product selection and personal styling, provide product knowledge and complete-look recommendations, guide purchase decisions, and deliver seamless checkout experiences. Drive sales through customer engagement, storytelling, and brand expertise while maintaining stockroom organization and operational excellence. The role requires flexibility for nights, weekends, holidays, and high-traffic retail periods, along with collaboration, multitasking, and willingness to learn omni-channel selling techniques.
Top Skills:
Omni-Channel Selling ToolsPos Systems
eCommerce • Fashion • Retail • Sales • Wearables • Design
Provides exceptional customer service, achieves individual sales goals, develops product expertise and personal clientele, communicates the Kate Spade brand, processes POS transactions, follows visual and operational standards, and assumes heightened store responsibility as a keyholder. Requires strong selling and interpersonal skills, multitasking ability, teamwork, and preferably prior luxury goods experience.
Top Skills:
Pos
Fintech • Financial Services
Leads engineering managers and experienced engineers building and operating front-office trading platforms for structured products, credit trading, and municipal bonds. Drives architecture, modernization, cloud readiness, security, scalability, DevOps, delivery, and operational stability. Partners with product leaders, architects, vendors, and stakeholders to prioritize roadmaps, resolve technical impediments, manage risk, and meet regulatory requirements. Oversees hiring, talent development, performance management, and financial and resource allocation.
Top Skills:
.NetAngularC#Ci/Cd PipelinesClaude CodeCloud PlatformsCursorDevOpsEvent-Driven ArchitecturesGithub CopilotJavaMicroservicesReactRest ApisSpring Boot
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
