Senior Process Architect

Process Architect: Engineering & Security

Vulnerability management that takes too long from detection to remediation. Security controls that work but are hard to demonstrate. A development pipeline where quality and security arrive late rather than built in. Those are the three processes you focus on, and you do it across the whole domain, over teams and departments.

You map how things work today, design how they should work, and make sure the difference actually gets built. That last part is where this role is won or lost. A beautiful diagram is not the goal here; automated processes that engineers notice are.

The environment

Our client is a large financial organisation. You would work inside the IT organisation, at the intersection of engineering and security, with no hierarchical authority over the teams you want to change. Persuasion here runs on substance and trust.

Because it is a regulated environment, a process has to be more than efficient; it has to be demonstrable. That is exactly the tension this role is about: less manual work, without giving up provability.

What you'll do

Analyse and document the current processes, and design the target state.

Find the bottlenecks, the overlap and the manual work, and prioritise the improvements.

Identify automation opportunities and turn them into real solutions with engineering.

Establish process architecture, standards and governance across the domain.

Make vulnerability management faster and more manageable, from detection to remediation.

Set up security processes and controls so they are both efficient and demonstrable.

Streamline and automate the SDLC, with quality and security built in.

Bring stakeholders along at every level, from engineers to management.

Technical ground

Core: process architecture · business process management · BPMN · ArchiMate · process optimisation and automation

Also in the mix: vulnerability management · DevSecOps · SDLC · security controls · governance and standards

Must-haves

Serious weight in business and process architecture and business process management.

Demonstrable experience in a CIO or CTO organisation, or as a process architect for engineering processes such as SDLC, DevSecOps or vulnerability management.

Modern BPM methods and modelling languages, including BPMN and ArchiMate.

The ability to turn process optimisation into actual automation rather than an advisory report.

Strong stakeholder management, and the ability to persuade without hierarchy.

Experience in financial services or another regulated environment.

You are at home where process, security and engineering meet, and you have the patience to get an improvement all the way through rather than merely delivered