Key Notes
Enterprise security architecture covers cloud, applications, infrastructure, hardware and data, with Zero Trust, identity controls and incident resilience central to the remit. Proven experience securing software, hardware and AWS environments against recognised frameworks is explicitly essential. This full-time Manchester role is hybrid and open to UK citizens or residents with full, ongoing work rights.
What You'll Work On
- Define and evolve Vix's enterprise security architecture across cloud, application, infrastructure, hardware and data platforms.
- Embed security-by-design principles with engineering and product teams throughout product development and delivery.
- Drive Zero Trust, identity and privileged-access strategies while shaping AWS cloud security, network segmentation, workload protection and secure CI/CD pipelines.
- Align security controls with PCI, ISO, CIS, NIST, CSA, NIS and GDPR requirements, evaluating emerging technologies and influencing strategic decisions.
- Guide incident-readiness and resilience initiatives so architectural choices strengthen detection, response and recovery capabilities.
Why This Role Matters
- Vix’s enterprise architecture spans cloud, applications, infrastructure, hardware and data; shared security controls connect engineering decisions with the organisation’s framework and regulatory requirements.
- Cloud segmentation, privileged-access controls and secure pipelines shape workload protection, while incident-readiness guidance connects architectural decisions with detection, response and recovery capabilities.
What They Are Looking For
- Experience: Relevant experience includes deep cybersecurity experience and a strong security-architecture foundation across AWS, hybrid cloud and DevSecOps.
- Technical: Proven architectural experience securing software, hardware and AWS environments against recognised security frameworks is explicitly essential.
- Technical: Relevant technical skills include hands-on use of tools such as SIEM, IDS/IPS, DLP, IAM and encryption.
- Domain: Relevant domain knowledge includes NIST, ISO 27001, CIS and OWASP knowledge; PCI-compliant environment experience is ideal.
- Eligibility: The role is open to UK citizens or residents with full, ongoing work rights.
- Preferred: CISSP, CCSP, CISM or TOGAF are welcome but not essential; AWS Solutions Architect certification is very desirable.