NRS is in the midst of an exciting digital transformation, embracing modern technologies such as M365, the Power Platform and a range of SaaS solutions to reshape how the organisation works. As our digital capabilities expand, so does the importance of safeguarding our environment, particularly as a business operating within the Critical National Infrastructure sector, where the stakes of cyber resilience are incredibly high. 

In this role as Lead Security Architect, you’ll play a pivotal part in enabling the organisation to adopt innovative technologies with confidence. You’ll combine strategic thinking with strong technical expertise to understand emerging risks, shape secure solutions and guide the business in making informed decisions. Success in this role comes from translating complex security considerations into clear, meaningful guidance for stakeholders at all levels, working closely with senior leaders and the Cyber Security & Information Assurance (CS&IA) team to strengthen NRS’s security posture for the future. 

What will you be doing 

The Lead Security Architect at NRS plays a critical role in ensuring cyber security is built into every stage of system and service design. This includes developing secure architecture patterns, defining security principles and standards, and embedding appropriate cyber security controls into technical solution designs. The role also involves producing compliance reports aligned with frameworks such as NIST, CAF and CIS benchmarks, completing Authority to Operate (ATO) documentation and Risk Balance Cases, and providing clear guidance for IT Health Checks and design reviews to ensure ongoing compliance. 

A key part of the position is communicating security risks effectively to both technical and non‑technical stakeholders, crafting clear summaries, and maintaining engagement plans to ensure alignment on security measures. You’ll contribute to industry and sector-wide alignment, ensuring NRS’s architecture reflects broader NDA strategies. Additionally, you’ll provide risk-based insights through security assessments, emerging technology evaluations and decision-support artefacts that help prioritise mitigations and enable secure, efficient delivery across projects and programmes. 

Who are we looking for 

We’re looking for a highly skilled security professional who brings both strong technical depth and confident leadership. To be considered for this role, you must hold the Microsoft Cybersecurity Architect Expert certification, along with at least one additional, current cyber security qualification such as NIST, SABSA, CISSP, CISM, CREST, CCSP or ISO 27001. You’ll have extensive experience operating as a Security Architect across areas including network, application and information security, cloud security, identity and access management, threat intelligence, incident response, GRC, security operations and cryptography, supported by hands‑on technical expertise. Deep knowledge of Azure security models and a solid understanding of Microsoft technologies across Azure and M365 (covering data, infrastructure, EUC, analytics, security and AI) are essential. You’ll also bring experience in project and programme delivery, strong business and leadership capability, and excellent communication skills, able to negotiate, collaborate and translate complex technical concepts for non‑technical audiences at all levels of the organisation. 

It would be advantageous if you hold a degree or higher qualification in a relevant subject, along with additional current Microsoft certifications in areas such as data, infrastructure, collaboration, end‑user compute or AI. Experience within industries such as energy, utilities, construction or civil engineering is also desirable, as is membership of a relevant professional institute. 

Please note this is a hybrid role, so the successful candidate will need to live within a commutable distance of one of our NRS sites.