About the Role
The John Lewis Partnership is enhancing its security capabilities by accelerating the use of data and insight. This role is responsible for designing security solutions, patterns, and blueprints across data, platforms, cloud, and network capabilities to support strategic goals within a dynamic threat landscape.
Responsibilities
- Design End-to-End Security Solutions: Create effective, efficient, repeatable, and sustainable security solutions and patterns across cloud platforms (AWS, GCP) and traditional hosting environments.
- Embed Best Practice & Reduce Risk: Ensure security architecture best practices are applied during solution design activities to reduce delivery cost, operational risk, and technical debt.
- Democratize Secure Delivery: Enable architects and engineers through clear design principles, patterns, blueprints, and guardrails to scale and democratize secure delivery.
- Provide Commercial & Contractual Counsel: Advise on the commercial and contractual implications of obligations, reviewing contractual terms of procured technologies and business services.
- Drive Cross-Functional Collaboration: Partner with the CISO function, architecture, and engineering teams to ensure security capabilities deliver value and optimize opportunities.
- Monitor & Advise on Industry Trends: Stay updated on technology, retail, and socio-economic trends, influencing internal decisions to support JLP's strategic aims.
Requirements
- Modern Security Architecture Expertise: Extensive experience defining clear, outcome-focused solutions using roadmap intent, best practice, business context, and stakeholder engagement.
- Agile & Technical Architecture Delivery: Adaptable, engineering-focused mindset with proven experience working across multiple service and domain teams through Agile and domain-based delivery models.
- Core Security Frameworks & Methodologies: Practical experience facilitating threat modeling workshops, working within DevSecOps/SecOps environments, applying Zero Trust philosophies, and utilizing the NIST Cybersecurity Framework.
- Hybrid-Cloud & Infrastructure Knowledge: Expert knowledge of securing data and workloads across Google Cloud/Workspace, Amazon Web Services, Zscaler, and commodity SaaS applications.
- Critical Influence & Leadership: Proven ability to empower and influence others to make decisions, resolve challenges, and deliver outcomes aligned with business strategy.
- Emerging Tech & Threat Awareness: Strong understanding of attacker tools, techniques, and procedures with pragmatic mitigations, and practical experience securing AI/LLM deployments.
Skills
- AWS
- GCP
- Zscaler
- DevSecOps
- SecOps
- Zero Trust
- NIST Cybersecurity Framework
- AI/LLM security
Location
- London head office
- London Central Office, 1 Drummond Gate, London, , SW1V 2QQ
Work Type
- Hybrid working
- Permanent
Experience Level
- Partnership Level 6
Education Level
- TOGAF
- SABSA
- CISSP
- CCSP
- ISSA
- CEH
- GCP Professional Cloud Architect/Security Engineer
- Zscaler Zero Trust Associate
- CSA Trusted AI Safety Expert
Salary/Compensations
- £62,900.00 - £100,000.00
- £62,900.00 - £115,000.00
Benefits
- Flexible working
- Flexible or compressed hours
- Job sharing
- Shorter hour contracts
About the Company
- We’re the largest employee owned business in the UK and home of our cherished brands, John Lewis and Waitrose.
- We’re not just employees, we’re Partners, driven by our purpose to build a happier world.
- We’re ruthlessly focused on being brilliant at retail.
- We continue to innovate, adapt and diversify.
- As Partners we all share the responsibility of ownership and in its rewards.
- We use our voices to contribute to our success, working together through the good and challenging times, holding true to our behaviours and treating everyone with kindness and respect.
- We all own making the Partnership somewhere we belong.
- Embracing our differences and creating an environment where we’re free to be ourselves and can THRIVE.
- Growing ourselves individually, and as a collective.
- As Partners, we make all the difference. And, we all own it.
- At the John Lewis Partnership we’re not just employees; we’re co-owners, and that’s why we’re called Partners.
- Being a Partner means not only do we all collectively share the responsibilities of being the UK’s largest employee-owned business, but we also share in its rewards and successes.
- It’s this ownership model that makes the Partnership a very unique place to work.
Equal Opportunity
- Some of our roles are subject to pre-employment vetting (which may include DBS checks for successful candidates).
- Any DBS checks required will be carried out by a third-party registered body and financial probity checks may also be required for some of our roles.
- We want all of our Partners to have a good work-life balance and we support flexible working.
