Cloud Security Architect

JOB TITLE: Cloud Security Architect  

LOCATION(S): Manchester 

HOURS: Full time 

WORKING PATTERN: Hybrid, 40% (or two days) in an office site 

About this opportunity 

The Chief Security Office (CSO) is a vital part of delivering the Group's vision of putting customers at the heart of everything we do, helping Britain prosper and protecting the Group and customers from security threats. We’re responsible for defining and communicating Lloyds Banking Group's security strategy and providing a range of critical Enterprise Security Services which not only operate key controls that keep the Group safe but also enable the digital transformation agenda of the wider organisation. 

The Cloud Enterprise & Server Security Lab is at the forefront of this transformation driving secure-by-design principles across multi-cloud environments. We’re looking for a Cloud Security Architect to shape the future of cloud security architecture and deliver secure, resilient, and scalable solutions. 

Are you a forward-thinking Cloud Security Architect ready to make an impact? Do you want to develop secure multi-cloud architectures that accelerate delivery? If you thrive making risk-based decisions, standardising reference patterns, and turning sophisticated threats into clear guardrails – this is your opportunity! 

What will I do  

• Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments. 

• Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift. 

• Partner with engineering and product teams to embed security guardrails early in design, ensuring compliance and resilience. 

• Review external architecture proposals and identify security gaps. 

• Document and uphold secure-by-design principles and architecture governance. 

• Collaborate with senior partners to articulate security risks and mitigations. 

• Anticipate customer needs taking proactive steps to address them. 

Why Lloyds Banking Group 

We’re on an exciting journey to transform our Group and the way we’re shaping finance for good. We’re focusing on the future, investing in our technologies, workplaces, and colleagues to make our Group a great place for everyone. Including you. 

What you’ll need  

Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards. 

Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems. 

Cloud Security Expertise: Broad knowledge across the following Security Domains and their capabilities within Azure/GCP and SME experience in at least one area. Familiarity in AWS is also desirable. 

• AI/ML security: Knowledge of AI/ML threats and risks, with experience applying security controls for secure deployment of AI services in cloud platforms. 

• Application Security: CI/CD Security including secure software supply chain. 

• Data Security: Key, certificate and secrets Management. 

• Identity and Access Management: Securing user/non-user access at scale. 

• Infrastructure Security: Kubernetes (AKS/GKE/Istio), API Security, IaC security (e.g. Terraform, ARM templates). 

• Network Security: Zero Trust, firewalls, segmentation, DDoS Protection. 

• Security Logging and Monitoring: Security logging, SIEM integration, event correlation. 

In addition, any experience of these would be useful 

• CISSP, CCSP, or equivalent certifications. 

• Azure Security Engineer Associate, Google Professional Cloud Security Engineer. 

• Microsoft Certified: Azure Solutions Architect Expert, Google Professional Cloud Architect. 

About working for us 

Our ambition is to be the leading UK business for diversity, equity and inclusion supporting our customers, colleagues and communities and we’re committed to creating an environment in which everyone can thrive, learn and develop. 

We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and a dedicated Working with Cancer Initiative. 

We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. And, as a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role with a disability, long-term health or neurodivergent condition through the Disability Confident Scheme. 

We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers. Just let us know what you need. 

We also offer a wide-ranging benefits package, which includes: 

• A generous pension contribution of up to 15% 

• An annual bonus award, subject to Group performance 

• Share schemes including free shares 

• Benefits you can adapt to your lifestyle, such as discounted shopping 

• 30 days’ holiday, with bank holidays on top 

• A range of wellbeing initiatives and generous parental leave policies 

Want to do amazing work, that’s interesting and makes a difference to millions of people? Join our journey.