Enterprise Security Architect

At a glance

• Flexible working – This is a hybrid working role, therefore your time will primarily be split between working from home and the London Head Office.

• Salary range – GBP57,600 – GBP92,400

• Contract type – Permanent

What's the role about?

The John Lewis Partnership (JLP) continually invests in its security capabilities, recognising the trust our customers place in our brand and the information they provide to us to help us enrich their lives. To enhance the value we bring to our customers, the Partnership is accelerating the use of data and insight to enhance the experience and relevance our Partners and technology systems provide to our customers. We will continue to transform our security capabilities to deliver that vision within an ever–changing threat landscape.

This role is responsible for developing our strategies, target/transition states, roadmaps and patterns across our data, platforms, cloud and network capabilities. To achieve this you will work closely with our CISO function, across our architectural domains and with our product engineering and service teams. To be successful in this role you will need to be highly motivated, technically skilled and a great communicator.

What you'll be doing as an Enterprise Security Architect:

The JLP Architecture Team is part of the Technology Division which supports approximately 70,000+ employees, 363 stores, a turnover of over GBP12bn, and a transformational IT expenditure in excess of GBP200m pa.

Working for the Lead Enterprise Architect you will enjoy freedom and latitude to:

• Define and deliver a technology security strategy and architecture that supports the Partnership's digital transformation through the secure enablement of business agility, data–driven decision making, and extensible capabilities;

• Secure the value of technology investments in the portfolio by linking security outcomes with situational awareness, providing the parameters within which technology decisions are made to maximise ROIC;

• Establish the 'shareholder value' of IT to the wider business through the management of our risk profile within tolerance using the smart application of technology, and informing near–term vs long–term investment trades;

What you'll have (essential skills):

Impactful security architect

Extensive experience and deep understanding of Security Architecture, ensuring senior IT and business stakeholders are aligned and understand the level of risk and investment required to meet their vision in a complex business environment. Act as an enabler for our strategy realisation by establishing links and artefacts with change enabling activity.

We operate across a diverse technology estate, strength in security best–practice and associated frameworks and major technologies are essential for this role:

• TOGAF and/or SABSA

• Threat modelling frameworks

• Software Development Lifecycle

• NIST Cybersecurity Framework

• ISC2 Certified Cloud Security Professional / Certified Information Systems Security Professional

• Cloud architectures, as deployed across Amazon Web Services and Google Cloud Platform, and SaaS platforms, as part of a hybrid–cloud enterprise

• Zero Trust philosophies

• Attacker tools, techniques and procedures, alongside an understanding of approaches for pragmatic mitigations

• Product and platform oriented delivery, working across Waterfall and Agile contexts

Critical influence

Proven ability to empower and influence others to make decisions, resolve challenges and deliver outcomes that are in line with the strategy. Work across architecture, service and engineering teams to ensure that our security capabilities are bringing the intended value, actively optimising where opportunities arise through pattern definition and solution evangelism.

Strategy development & strategic planning

Experience working with teams across the business to create, inform and provide input to business strategy creation, development, and implementation. Experience developing the Technology Strategy as a critical component of the business (security) strategy, ensuring business and technology outcomes are mutually supportive.

Commercial & contract acumen

You'll advise and consult on the commercial and contractual implications of existing or new obligations. You'll consult on contractual terms of technologies and business services being procured or used within your domain and the impact of change both commercially and contractually.

What else you could bring (desirable skills):

Business domain knowledge

Understand how the business capabilities that support JLP or a Product and Platform operate with reference to marketplace good practice. Understand the capabilities and processes that support the business and how this differs from our competition and the likely areas of competitive advantage or improvement.

Sequence change to deliver incremental business value

You'll have influenced business ambition and established credible roadmaps to establish change in business or technical capabilities that maximise business benefit and cost of ownership.

Monitor and advise on current technology, retail and socio–economic trends

You can evidence how you stay up to date with trends and shifts in technology, retail and the wider world, and set this understanding against the business or technology context within which you are working.

You'll consult internally on trends and shifts in technology, retail and the wider world, influencing technology and business decisions to support JLP strategic aims.

Next Steps

• The application form consists of a CV upload, followed by application questions. Please visit – to understand more about application and hiring process

• Internal applicants please copy paste this link on to the browser for job outline –

• We occasionally close vacancies early in the event that we receive a high volume of applications. Therefore we recommend you apply as soon as possible.

Benefits:

– Hybrid Working.

– Comprehensive work life balance, including focus on well being and flexible working and our market leading Equal Parenthood Leave Policy

??? – Depending on your Partnership job level, if you work full time you'll get between 22 and 30 days holiday a year, plus bank holiday entitlement

– The Partnership has a Defined Contribution pension scheme where your contributions, up to an agreed level, will be matched by the Partnership. In addition, after a qualifying period of service you may receive an additional Partnership contribution.

– You'll get Partnership discount in store and online once you complete Probation. That's 25% off in John Lewis & Partners (12% off electrical products) and 20% in Waitrose & Partners. You'll also be able to nominate someone you live with to share your discount

– Simple cycle to work support scheme

– We're really proud of our exclusive hotels based in some of Britain's most luxurious areas and once you've been with us for three months, you're welcome to explore them

– Learn more about our Benefits structure, visit –