Security Architect

Ferranti is hiring a (Cyber) Security Architect to drive security‑by‑design across our technology landscape. You’ll combine architectural leadership with hands‑on execution, shaping secure solutions for our products, platforms, and customers in the energy sector.

Your Responsibilities

In a nutshell: You’re passionate about cybersecurity and architecture and you’re not afraid to roll up your sleeves

As our (Cyber) Security Architect, you’ll design and implement pragmatic security solutions, embed security controls across our IT landscape, and translate compliance requirements into actions teams can actually execute.

You’ll work closely with IT and development teams to integrate security across infrastructure, systems, and applications. You’ll also help keep our cybersecurity practices aligned with ISO 27001, while strengthening our posture against evolving threats—especially in Microsoft‑based environments.

What you’ll do

• Define and maintain the organization’s security architecture framework.
• Translate regulatory and compliance requirements (NIS2, CRA, GDPR, AI Act, ISO 27001) into actionable controls, policies, and standards.
• Design and implement Microsoft‑based security architectures that support business and customer needs.
• Embed security controls across infrastructure, systems, and applications (security‑by‑design / privacy‑by‑design).
• Drive Secure Development Lifecycle/ DevSecOps adoption and secure coding guidelines.
• Create clear architecture documentation and solution specifications.
• Perform security reviews, audits, and support certifications together with the quality management team.
• Continuously assess and improve security posture to defend against emerging threats.

Your profile

What you bring

• Proven experience designing and implementing security architectures (hands‑on, not only advisory).
• Provide security leadership across projects by driving practical adoption of security‑by‑design and privacy‑by‑design.
• Strong analytical, problem‑solving, and stakeholder communication skills.
• Experience integrating security controls into IT infrastructures, systems, and applications.
• Ability to perform risk assessments and define pragmatic remediation strategies.
• Strong writing skills for policies, standards, architecture documentation, and customer‑facing material.

Nice to have / Knowledge of

• Certifications such as CISSP, Azure Security (or equivalent).
• Security frameworks and standards (NIST, ISO 27001, CIS Benchmarks).
• Threat modeling, vulnerability management and incident response.
• Regulatory and compliance domains (GDPR, NIS2, CRA, AI Act).
• Cloud, endpoint and network security technologies; Microsoft security & information protection (e.g., Purview).

You are

• Hands‑on and proactive—you take ownership and move from design to implementation.
• Comfortable working with both technical teams and business stakeholders.
• Passionate about embedding security into every step of delivery (security‑by‑design).

We offer

• A strategic role with impact on the company’s future security posture.
• An innovative environment where you stay close to the latest technologies.
• A trust‑based culture where continuous growth is encouraged.
• An attractive and flexible salary package (company car, insurance, laptop, iPhone, internet, and options to tailor benefits to your needs).
• Open to freelance roles.