Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

This role defines, leads, and evolves security architecture across TMHCC's international business division, embedding security by design into business and technology initiatives. As a senior member of the International Security team, you will provide strategic direction, establish security architectural standards, and collaborate with various teams to design secure, scalable solutions, ensuring alignment with enterprise risk, regulatory requirements, and business objectives.

Responsibilities

Define and maintain the enterprise security architecture framework, standards, and reference architectures aligned to industry best practices (e.g. NIST, SABSA, TOGAF).
Provide architectural oversight and governance for major technology initiatives, ensuring security risks are identified, assessed, and mitigated early in the lifecycle.
Lead the design and assurance of secure architectures across applications, cloud, infrastructure, and data platforms.
Act as a trusted advisor to senior IT and Architecture leadership, translating business requirements into secure architectural solutions.
Establish and enforce security design principles, patterns, and guardrails to support secure-by-design and DevSecOps practices.
Drive the integration of security controls into enterprise platforms, including identity, network, cloud, and application ecosystems.
Lead threat modelling and risk assessments for complex systems and emerging technologies in line with Enterprise Security architecture frameworks.
Collaborate with engineering, operations, and security teams to ensure consistent implementation of architectural standards and controls.
Support regulatory compliance and audit activities by ensuring architectures align with internal policies and external requirements.
Establish and maintain a robust, scalable security architecture that aligns with TMHCC’s business strategy, risk appetite, and regulatory obligations.
Provide effective architectural governance across programmes and projects, ensuring security risks are proactively identified and mitigated.
Drive adoption of secure-by-design principles and architectural standards, improving consistency, resilience, and security maturity across the organisation.

Requirements

Experience in cyber security, with significant experience in security architecture.
Proven experience designing and implementing security architectures across cloud (AWS/Azure), applications, infrastructure, and data platforms.
Experience applying security frameworks and standards (e.g. NIST CSF, CIS, SABSA, TOGAF).
Deep understanding of identity and access management, network security, cloud security, and application security principles.
Experience leading threat modelling, risk assessments, and security design reviews for complex systems in accordance with threat modelling frameworks (e.g. STRIDE).
Ability to translate business and technical requirements into secure architectural designs and patterns.
Strong stakeholder management skills, with experience influencing senior leadership and cross-functional teams.
Experience establishing architectural governance, standards, and security design authority processes.
Excellent communication skills, with the ability to articulate complex security concepts to both technical and non-technical audiences.
Familiarity with Zero Trust architectures and modern security models.
Experience within financial services or regulated industries (Desirable).
Experience with applicable UK and EU regulation (e.g. DORA and GDPR) (Desirable).
Experience with containerisation, Kubernetes, and microservices security (Desirable).
Knowledge of emerging technologies and security implications (e.g. AI/ML) (Desirable).

Skills

Security Architecture
Cloud Security (AWS/Azure)
Application Security
Infrastructure Security
Data Platform Security
NIST CSF
CIS
SABSA
TOGAF
Identity and Access Management
Network Security
Threat Modelling
Risk Assessment
STRIDE
Stakeholder Management
Architectural Governance
Zero Trust Architectures
Containerisation
Kubernetes
Microservices Security
AI/ML Security Implications

Location

International

Work Type

Full Time

Experience Level

Senior

Education Level

CISSP
CCSP
TOGAF

Benefits

Competitive salary
Employee benefit package

About the Company

Tokio Marine HCC is one of the world’s leading Specialty Insurers with deep expertise in chosen lines of business, an unparalleled track record, and a solid balance sheet.
TMHCC evaluates and manages risk like no one else in the industry.
The company values customer focus, empowering people, delivering on commitments, and providing creative and innovative solutions.
The IT department is the foundation for TMHCC’s success, enabling business growth, competition, and innovation through technology, security, and solution design.
TMHCC fosters an inclusive and collaborative culture that empowers employees to explore ideas, solve challenges, and build fulfilling careers.
TMHCC is a successful, dynamic organization experiencing rapid growth.
TMHCC prides itself on hiring smart, conscientious people who want to make a difference.
The company supports and trusts its employees.
TMHCC seeks curious, creative, transformative thinkers who want to change the status quo and have a passion for doing the right thing.

Equal Opportunity

The Tokio Marine HCC Group of companies is an equal opportunity employer.