Information Security Architect

We are looking for a brand-new Information Security Architect to join our growing Cyber team at Howdens Joinery.

As our trusted expert and advisor, you’ll design secure, scalable, and forward-thinking solutions that empower Howdens’ digital transformation while protecting what matters most. You’ll work at the cutting edge of infrastructure, cloud, and application security — influencing key design decisions and ensuring our technology landscape remains resilient, compliant, and ready for the future.

This is a permanent opportunity based from our office in Northampton where you will be required to work onsite 2 days per week.

What will I be doing as an InfoSec Architect?

• Collaborate across business, technical, and service teams to design and deliver security solutions that enhance cybersecurity maturity, reduce risk, and align with broader business objectives and priorities.
• Engage with stakeholders to understand and balance competing business needs, technical constraints, and security requirements, ensuring practical and effective outcomes.
• Lead and contribute to solution design and re-architecture initiatives, assessing technical options in partnership with the Head of Information Security and Enterprise Architecture, and ensuring solutions are secure, maintainable, and scalable.
• Conduct proactive security architecture reviews of planned and existing systems to identify risks, validate control effectiveness, and drive continuous improvement in design and posture.
• Assist in the evaluation and procurement of security technologies, ensuring alignment with organisational standards and architecture principles.
• Investigates alerts to determine their legitimacy and impact, prioritises response actions based on severity, and coordinates containment and remediation activities when threats are confirmed.
• Assists with proactive hunting activities to uncover undetected threats and helps build hypotheses based on threat intelligence, behavioural patterns, and environmental baselines.
• Performs regular updates and tuning of detection rules, playbooks, and alert thresholds to reduce false positives and ensure high-fidelity threat detection.
• Act as a champion to promote and raise awareness of Information Security best practice and ensure compliance to security policy.

What we need from you:

• Information Security with a strong architecture focus.
• Strong knowledge in lateral movement risks, network segmentation, and endpoint security.
• Extensive experience with Windows and Linux OS’s.
• Skilled in protocol analysis, network architecture, and infrastructure design.
• Hold recognised Cyber Security qualification (CISSP, CISM or equivalent).
• Knowledge of industry related frameworks such as ISO27001, PCI DSS, Zero Trust
• Strong communication skills and the ability to communicate with colleagues at all levels.
• Ability to work with and manage 3rd party suppliers.
• Experience of managing change.
• Drive and resilience.
• Presentation experience.
• Training and accreditation in industry recognised technologies
• Skilled in presentation and training techniques in matters of IT security (Beneficial)

What we can offer you

• Grade 4
• Competitive salary and annual company bonus
• Company car or car allowance
• Private medical insurance
• Excellent pension scheme (company contribution of up to 12%)
• 25 days holiday + bank holidays with the option to buy additional days
• Staff Discount
• Employee Assistance Programme
• Exceptional Reward and Recognition events

How to apply

Good luck with your application.  Before you apply, please speak to your manager, so that they are aware of your interest in this role.  You will also need to attach a CV as part of your application.  Please take note that this advert is a summary of the main duties and responsibilities and may be subject to change.  If you have any questions or need further support or information, please contact the Hiring Manager Adam Reid or Holly Gibbins, Recruitment Advisor.