Lead Security Architect (Cloud)

Key Responsibilities

• Develop and execute the global cloud security architecture roadmap using a hands-on approach.
• Formalize security principles and requirements through reference architectures, guardrails, and documentation.
• Collaborate with IT and business function architects to deliver secure cloud solutions across the JLR estate.
• Embed security best practices in architecture development processes to improve standardization.
• Conduct threat modeling and provide security design patterns to align with JLR's architecture framework.
• Assess security risks and compliance for cloud operations, ensuring alignment with industry standards.
• Evaluate and recommend improvements to vendor security, particularly regarding intellectual property and regulated data.
• Monitor emerging threats and trends to refine security strategy and architecture.
• Provide security guidance for product selection and collaborate with external vendors on innovative technologies.

Key Interactions

• Collaborate with CISO, Security Architects, Business and Solution Architects, DevOps teams, Legal, and external vendors.
• Engage with senior stakeholders, including the C-level community and regulatory bodies.

Knowledge, Skills, and Experience

Essential:

• 5+ years in cloud security architecture within large-scale global environments.
• Expertise in IaaS, SaaS, and PaaS security solutions, including cloud-native tools and governance models.
• Strong knowledge of security frameworks (e.g., TOGAF, ISO27001, COBITv5) and compliance standards.
• Experience in integrating cloud toolsets into SOC/SIEM and CASB for reporting.
• Hands-on experience with Azure, M365, containerization, serverless code, and Build-from-Code environments.
• Exceptional relationship management, program management, and consulting skills.

Desirable:

• IT security certifications (e.g., CISSP).
• Experience in manufacturing, IoT, and connected car technologies.
• Accreditation in SaaS solutions such as Salesforce.