Director - Security Architecture at Quadient in London

Job description

We’re looking for a Director, Security Architecture to establish and lead how security architecture works across Quadient. This is a highly influential role spanning everything from established legacy environments to cloud-native products, integrations and emerging AI technologies. Reporting directly to our CISO, you’ll define the security architecture direction and work closely with engineering, product, enterprise architecture, cyber defence and GRC teams to embed security into solutions from the earliest stages of design. You’ll lead a small security architecture capability while influencing teams across our global organisation. Build and shape our Security Architecture capability , defining principles, reference architectures, patterns and pragmatic guardrails that make secure-by-design the natural choice for our engineering teams. Lead security architecture reviews across new products, platforms, APIs, applications, integrations and data solutions, translating threats and risks into practical engineering requirements. Drive a threat-led approach to security , using threat modelling, attacker behaviour and frameworks such as MITRE ATT&CK to inform architecture decisions and prioritise controls. Shape security across the complete software delivery lifecycle, including secure SDLC, application security, vulnerability management and security assurance. Lead our approach to AI security architecture , defining guardrails for AI/ML and GenAI solutions and helping Quadient adopt emerging technologies securely and responsibly. Partner with engineering and platform teams on AppSec tooling and automation, including SAST, DAST, dependency, container, IaC and secrets scanning. Work across cloud, on-premise and legacy environments, finding pragmatic solutions that balance security, risk, technology and business needs. Act as a trusted security advisor and senior escalation point, influencing technical and business stakeholders globally and helping teams make informed security decisions. You’re an experienced security architecture professional who can go deep technically while still seeing the bigger picture. You’re comfortable setting direction, but you’re equally willing to get involved in complex architecture discussions and help teams find a practical way forward. Significant experience in security architecture or security engineering , ideally including end-to-end ownership of security architecture for modern software products and solutions. Strong knowledge of product and application security , including secure SDLC, threat modelling, vulnerability management and security testing. Strong understanding of cloud and platform security , alongside the ability to work with on-premise and legacy environments. Experience defining security architecture requirements and assessing whether controls are appropriate and effectively implemented. Experience influencing engineering and product teams and driving security improvements without relying on direct authority . A pragmatic, threat-led mindset – able to balance risk reduction with real-world delivery rather than applying the same level of control to every situation. Strong communication skills and the ability to explain complex technical security topics to engineering, business, risk and senior stakeholders. Genuine curiosity about emerging technologies and a strong interest in AI/GenAI security . Fluent English and comfortable collaborating across international teams and time zones. Experience with product security, SaaS/software environments, MITRE ATT&CK, infrastructure or network engineering would be valuable, but isn’t essential. Relevant security certifications such as CISSP, CCSP, CSSLP, GIAC or cloud security certifications are also welcome, but equivalent hands-on experience matters just as much. Knowledge gaps can be filled. Even if you don’t satisfy every single requirement or meet every qualification listed, we still want to hear from you.  Rewards & Benefits &#