The Security Architect is responsible for designing and documenting solutions across Sainsbury’s Information Security product stack, while working closely with the wider Tech community to promote and embed security best practices.

 

About the Team

 

Our Data Governance & Information Security team is at the heart of protecting the organisation’s systems, data, and people. We work across all areas of the business to identify risks, strengthen defences, and ensure compliance with industry standards and regulations.

We value accountability, curiosity, and continuous improvement, and we’re passionate about building a culture where security is second nature. Joining us means being part of a team that tackles evolving threats, drives awareness, and helps the organisation remain resilient and trusted.

 

What you need to do:

 

We’re seeking a Security Architect with a strong engineering background to strengthen our Information Security team. You’ll play a key role in shaping secure solutions across Sainsbury’s security platforms and work alongside the wider technology community to embed robust security practices into everyday delivery.

 

Key responsibilities include:

 

Produce key artefacts such as solution designs, technical evaluations, and governance documentation, ensuring that security is embedded throughout the solution lifecycle and aligned with the organisation’s strategy. Supporting capability roadmaps by evaluating current Information Security solutions and identifying areas for improvement. Supporting integration of security controls across infrastructure, applications, and data platforms. Lead and coordinate proof-of-concept (PoC) initiatives to ensure current Information Security tools and platforms remain aligned with organisational requirements, evolving threat landscapes, and long-term security objectives. Supporting Information Security Solution Owners in gathering and refining security requirements. Collaborating with engineering teams to ensure secure-by-design principles are implemented effectively. Develop and maintain high-quality documentation to support governance, audits, and compliance, while ensuring consistency across the Information Security team and alignment with broader Tech processes.

 

Essential Criteria

 

Proven ability to produce and review solution design documentation, security requirements, and architecture diagrams. Deep expertise in one core security domain - preferably Network Security, Cloud Security or Identity and Access Management. 2–3 years minimum experience as a Security Architect, Security Solutions Architect, Engineer or similar role in complex enterprise environments. General knowledge of cloud security principles and zero-trust models. Strong communication and collaboration skills, with the ability to engage technical and non-technical stakeholders. Ability to influence and guide cross-functional teams in adopting secure practices. Awareness of governance, risk, and compliance considerations in design and delivery.