Cloud Security Architect, Lloyds

• Governance, Risk & Compliance: Risk-based decisions, adherence to regulatory and internal security standards
• Threat Modelling and Risk Management: Identify threats and mitigations for complex cloud systems
• Cloud Security Expertise: broad knowledge across the following Security Domains and their capabilities within Azure/GCP and SME experience in at least one area. Familiarity in AWS is also desirable
• AI/ML security: Knowledge of AI/ML threats and risks, with experience applying security controls for secure deployment of AI services in cloud platforms
• Application Security: CI/CD Security including secure software supply chain
• Data Security: Key, certificate and secrets Management
• Identity and Access Management: Securing user/non-user access at scale
• Infrastructure Security: Kubernetes (AKS/GKE/Istio), API Security, IaC security (e.g. Terraform, ARM templates)
• Network Security: Zero Trust, firewalls, segmentation, DDoS Protection
• Security Logging and Monitoring: Security logging, SIEM integration, event correlation
• We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply

Desirable

• At Lloyds Banking Group, our purpose is simple: Help Britain Prosper. As we transform into the UK’s leading FinTech, we’re modernising our technology and security capabilities to protect our customers and enable innovation at scale
• The Cloud Enterprise & Compute Security Lab is at the forefront of this transformation driving secure-by-design principles across multi-cloud environments. We’re looking for a Cloud Security Architect to shape the future of cloud security architecture and deliver secure, resilient, and scalable solutions
• Develop and enforce reference architectures, patterns, and blueprints for secure cloud adoption across Azure, GCP and hybrid environments
• Conduct threat modelling and security assessments for new cloud services, defining preventative and detective controls (via security guardrails) to maintain secure posture and detect drift
• Partner with engineering and product teams to embed security guardrails early in design, ensuring compliance and resilience
• Review external architecture proposals and identify security gaps
• Document and uphold secure-by-design principles and architecture governance
• Collaborate with senior partners to articulate security risks and mitigations
• Anticipate customer needs taking proactive steps to address them

• End Date: Monday 27 July 2026