Job Description

Role: Information Security Architect

Department: Security Architecture, Engineering and Resilience

Firm: Clifford Chance

Location: London, United Kingdom (Hybrid)

Employment Type: Full-time

Position Overview

Operating within the Security Architecture, Engineering, and Resilience unit, the Information Security Architect serves as the authoritative expert across various portfolios. This role provides the technical vision and domain expertise necessary to align cybersecurity strategies with enterprise goals. You will focus on deploying secure, resilient IT transformations across Clifford Chance’s global infrastructure while prioritizing a seamless user experience.

As a primary technical guide, you will develop architectural “runways” to meet future resiliency needs and spearhead the firm’s IoT security platform. You are responsible for ensuring that all SmartBuilding and aligned OT (Operational Technology) devices are monitored and secured according to risk. Acting as a gatekeeper within the Architecture Community of Practice, you will ensure platforms are designed to mitigate risk and undergo rigorous testing.

Core Accountabilities:

Maintain a holistic vision of Information Security across all enterprise and development initiatives.
Construct and manage domain-level roadmaps that align security capabilities with long-term business strategy.
Design, implement, and manage security services across IoT, OT, and IT environments (on-premises and cloud).
Communicate strategic security themes to solution architects and non-technical business leaders.
Participate in the Data Governance Board to ensure secure data utilization.
Standardize security best practices in modeling, design, and coding alongside development leads.
Analyze and integrate innovative technologies to address future architectural security needs.
Synchronize data quality, production infrastructure, and scalability with security requirements.
Partner with the Cloud Security Architect to enhance the Cloud Centre of Excellence.
Represent the security function during firm-wide IT governance and control activities.

Candidate Requirements:

Minimum of 10 years in IT, with at least five years in a senior security architecture or senior engineering role within a global organization.
Advanced technical design expertise and comprehensive knowledge of cybersecurity frameworks (NIST, ISO27001, Cyber Essentials).
Mastery of the Microsoft security suite (E5, Sentinel, Entra, Defender for IoT).
Experience generating High-Level Designs (HLD) and Low-Level Designs (LLD).
Proficiency in architecture frameworks like TOGAF or SABSA.
Proven track record in a global professional services environment (Legal, Finance, or Banking).
Solid understanding of secure development lifecycles (Agile, Waterfall) and risk management.
Highly developed interpersonal skills for managing senior stakeholders and consulting with internal clients.
Relevant certifications: CISSP (required/preferred) and CISM (highly desirable).

Job Data Table

Category	Details
Company Name	Clifford Chance
Location	London, United Kingdom
Locality	London
Country	United Kingdom
City	London
Region	London
Job Type	Full-time
Salaries	Competitive (Market Leading)
Experience Level	Senior (10+ Years IT / 5+ Years Security)
Travel	Not Specified
Language	English
Benefits	Hybrid Working (50%), Medical, Lifestyle, Family Friendly

Skills & Competency Table

Skill	Competency Level
Security Architecture (HLD/LLD)	Expert
Microsoft Security Suite (E5/Sentinel)	Expert
IoT & OT Security	Advanced
Frameworks (NIST/ISO27001/SABSA)	Expert
Stakeholder Management	Advanced
Cloud Security	Advanced
Risk & Threat Management	Expert

Salaries Pay Calculator Table

Component	Amount	Notes
Annual Salary	Competitive	Based on senior global experience
Bonus	Included	Aligned with firm performance
Total Compensation	High	Includes premium benefits and wellbeing support

Job Summary

This Senior Information Security Architect role at Clifford Chance involves leading cyber transformation within a global law firm. You will define technical direction for IT, IoT, and OT portfolios, ensuring enterprise resilience and data protection while managing senior stakeholders and upholding the firm’s rigorous ethical and security standards in a hybrid London environment.

FAQs

What is the hybrid working policy?

The firm supports a “balanced” approach, requiring a minimum of 50% of your time in the London office.

Does this role cover more than just standard IT?

Yes, it specifically includes leadership of the firm’s IoT and OT security platforms for SmartBuildings.

What certifications are preferred?

The ideal candidate is a CISSP, ideally supplemented by a CISM qualification.

Is experience in the legal sector mandatory?

While not strictly mandatory, previous experience in global professional services (legal, finance, or banking) is highly valued.

What Microsoft tools will I use?

You should be fully conversant with Microsoft E5, Sentinel, Entra, and Defender for IoT.

Expert Analysis

In a “Magic Circle” law firm, the Information Security Architect is a protector of client privilege and firm reputation. This role is unique because it bridges the gap between traditional IT security and physical “SmartBuilding” IoT security, requiring an architect who understands both digital data flows and the physical security of a global office footprint.

Location & Logistics Guide

Based in the heart of London’s legal and financial district, Clifford Chance offers a world-class office environment. The hybrid model allows for flexibility while maintaining the collaborative culture essential for a global professional services firm.

City Wikipedia URL: https://en.wikipedia.org/wiki/London

Career Path

From this position, a professional can ascend to Head of Security Architecture, Chief Information Security Officer (CISO), or global lead for IT Risk and Compliance. The exposure to both IoT and high-stakes legal data makes this a versatile stepping stone for any senior executive leadership role in cybersecurity.

To apply for this job please visit jobs.cliffordchance.com.