Lead Security Architect

CompanyAllen Lane

LocationLeeds, England, United Kingdom

Posted At3/4/2026

UK Visa Sponsorship Analytics

Occupation Type

Cyber security professionals

Occupation Code Skill LevelHigher Skilled

Sponsorship Salary Threshold

£48,500 (£24.87 per hour)

Occupation rate applies

Above analytics are generated algorithmically based on job titles and may not always be the same as the company's job classification. You can also check detailed occupation eligibility, and salary criteria on our UK Visa Eligible Occupations & Salary Thresholds page.

Disclaimer: Hunt UK Visa Sponsors aggregates job listings from publicly available sources, such as search engines, to assist with your job hunting. We do not claim affiliation with Allen Lane. For the most up-to-date job details, please visit the official website by clicking "Apply Now."

Description

Job Title: Lead Security Architect

Organisation: Medicines and Healthcare products Regulatory Agency (MHRA)

Job Type: Permanent, full-time

Salary Range: £71,835 - £81,090 (+ up to £22,802 in non-pensionable Market Pay Supplement)

Key Benefits: Civil Service pension scheme (employer contribution of 28.97%); 25 days annual leave

Location: Leeds (8-12 days per month on site, driven by business need)

Allen Lane is supporting the MHRA in their search for a Lead Security Architect to join out Strategy & Architecture team within the Digital & Technology group.

This is a full-time opportunity, on a permanent basis. The role will be based in 7-8 Wellington Place, Leeds, LS1 4AP. Please be aware that this role can only be worked in the UK and not overseas. Our Canary Wharf and South Mimms sites are only available as contractual work locations to existing employees of the MHRA.

We are currently implementing a flexible, hybrid way of working, with a minimum of 8 days per month working on site to enable the collaboration and contact with partners and stakeholders needed to deliver MHRA business. Attendance on site is driven by business needs so depending on the nature of the role, this can flex up to 12 days a month, with the remainder of time worked either remotely or in the office. Some roles will need to be on site more regularly.

Who are we?

The Medicines and Healthcare products Regulatory Agency enhance and improve the health of millions of people every day through the effective regulation of medicines and medical devices, underpinned by science and research.

What’s the role?

As the Lead Security Architect, you will play a critical role in safeguarding the department’s IT infrastructure and sensitive data. You will be responsible for designing, building, and maintaining robust security architectures that protect the department's systems from threats and vulnerabilities.

Your primary goal is to ensure that all IT services and solutions are secure by design and compliant with government security policies and standards. This role requires a strategic thinker with deep technical knowledge, an understanding of emerging threats, and the ability to work collaboratively with various stakeholders to embed security principles throughout the IT landscape.

Key responsibilities:

Security Architecture Design

Develop and maintain a comprehensive security architecture framework that aligns with the department's IT strategy, government policies, and best practices.

Design security controls and solutions for new and existing systems, applications, and services, ensuring they are secure by design and compliant with relevant standards (e.g., NCSC, GDPR, ISO 27001).

Conduct threat modelling and risk assessments to identify and mitigate potential security vulnerabilities in proposed and existing systems.

Security Policy Development and Compliance

Develop, implement, and maintain security policies, standards, and procedures in line with government regulations, industry standards, and departmental needs.
Ensure that all IT systems and solutions comply with relevant legal, regulatory, and governmental standards, such as GDPR, Cyber Essentials, Secure By Design.
Conduct regular security reviews, audits, and assessments to ensure ongoing compliance and continuous improvement of security measures.

Security Awareness and Training

Stay current with the latest security trends, vulnerabilities, and threats, and disseminate relevant information to the wider IT team and stakeholders.

Stakeholder Engagement and Collaboration

Act as the primary security architecture point of contact for project teams, providing expert guidance on security requirements, design considerations, and risk management.

Collaborate with cross-functional teams to ensure security is integrated into all aspects of the department's digital transformation initiatives.

Effectively communicate difficult risk and security concepts in accessible ways that can be clearly understood by business leaders.

Influence and educate stakeholders on the importance of security principles, standards, and best practices.

Innovation and Continuous Improvement

Proactively identify opportunities to improve security architecture and reduce risk through innovation, new technologies, and process improvements.
Stay abreast of industry trends, emerging technologies, and best practices in security architecture, bringing forward recommendations for improvement.

Who are we looking for?

Our successful candidate will demonstrate the following experience in their application:

Extensive experience designing, implementing, and managing the security architecture for large, complex organisations, with deep expertise in security architecture principles including defence in depth, zero trust, least privilege, and secure‑by‑design approaches.

Strong risk and assurance capability, including conducting risk assessments and threat modelling, developing risk management strategies, and leading internal and external security audits, assessments, and penetration testing aligned to frameworks such as CAF and NIST.

Proven track record in security governance and continuous improvement, including developing and maintaining security policies, standards, and procedures in line with industry best practice, and applying up‑to‑date knowledge of emerging threats, vulnerabilities, and trends to strengthen organisational security posture.

Experience in designing and implementing secure network architectures, including knowledge of network protocols, segmentation, firewalls, VPNs, and intrusion detection/prevention systems (IDS/IPS) in on-premise and cloud environments.

Demonstrable experience with a range of security technologies and tools, including but not limited to: Identity and Access Management (IAM), SIEM tools, endpoint protection, and cryptography and encryption solutions, Data Protection and Privacy Controls, Vulnerability Management, Security Orchestration, Automation, and Response (SOAR) Tools, Secure Mobile and Endpoint Computing and securing web.

Familiarity with UK public sector regulations, standards, and frameworks, such as the Government Digital Service (GDS), Secure by Design, Cyber Essentials, NCSC guidelines, GDPR, and ISO/IEC 27001.

Security qualification e.g. CISSP, SABSA. (Desirable).

If you would like to find out more about this fantastic opportunity, please click here for further details.

To apply for this post, you will need to submit the following documentation to MHRA@allenlane.co.uk.

A CV (in Word format) setting out your career history, with key responsibilities and achievements. Please ensure you have provided reasons for any gaps within the last two years;
A statement of suitability (no longer than 1,000 words) explaining your interest in joining the MHRA and the experience you offer to the role given the criteria set out in the job description.

Closing date: 17th March at 17:00

Shortlisting date: By Tuesday 24th March

Interview date: Wednesday 1st April

Candidates will be contacted within a week of the sift and the interviews completed to inform them of the outcome.

Please note, external applicants will be offered at the base point of the salary range, the Civil Service pay rules apply for current Civil Servants apply on promotion or level transfer. Market Pay Supplement level is determined by performance at interview, with three pay points: Developing; Proficient; Accomplished.