Job Description

Who we are

CreateFuture is fast becoming the UK's most recognisable digital consultancy, with years of experience building digital products and services for major organisations whilst putting our people first. We have offices in the centre of Edinburgh, Leeds, Manchester, and London as well as remote employees located throughout the country.





We are a team of creators - whether that's code, project plans, go to market strategies, culture initiatives, marketing campaigns, large language models or people policies. And together, with our clients, we create the future. This has seen us collaborate and partner across a multitude of industries and sectors, with the likes of PayPal, adidas, Natwest, FanDuel and Money Saving Expert, to name just a few.





Our reputation as a partner determined to deliver high-quality, robust and thoughtful products has enabled us to scale to over 500 people in the last couple of years, and it is our amazing people - along with the safe, supportive and friendly culture we have built - that makes CreateFuture a great place to work. Don't just take our word for it though, we have been recognised by Best Workplaces UK multiple years in a row - across a number of categories - and our employee exit rate is astonishingly low.

Join us on our journey... Let's create something awesome, together, today.

About the role and team:

We're looking for an Enterprise Security Architect to join CreateFuture, working in partnership with one of our key clients.



This is an exciting opportunity to bring your security expertise into a fast-paced, agile environment, where you'll shape and deliver secure, scalable solutions that drive real impact. You'll be embedded within a collaborative client team, acting as a trusted advisor and technical authority on all things security -- from risk assessments and architecture design to embedding best practices and future-ready solutions.



You'll be supported by our diverse and experienced consultancy team at CreateFuture, while working hands-on with the client to push boundaries and solve complex challenges.

What you'll be doing:

Act as a security technical authority across key projects and services. Define and develop security requirements, patterns, and architectural blueprints. Assess risks and threats to systems and ensure security controls are embedded.
Collaborate with architects, engineers, and product teams to design secure solutions.
Translate regulatory requirements into practical, effective security designs. Use Agile methodologies to manage work via Epics, User Stories, and Tasks. Support proof of concept/value work for new technologies and platforms.

We'd love to talk to you if:

Solid experience in enterprise security architecture and hands-on InfoSec roles. Proven ability to design and implement security solutions across complex environments. Strong knowledge of risk, threat modelling, and regulatory standards (e.g. NIST, ISO 27001, GDPR, PCI-DSS).
Familiarity with tools like Sparx EA, Archi, JIRA, Confluence, GitLab, and AWS.
Ability to engage confidently with technical and non-technical stakeholders. Security certifications such as CISSP, SABSA, CISM, GIAC, or CEH are a plus.



###

Next steps:

Our TA team aims to respond to all applications within a reasonable timeframe, regardless of if we are progressing with your application.



Our process:



30 minute call with our Talent Acquisition Team

1-hour Technical interview


We believe that representative teams made up of people with different backgrounds, skills, and points of view help us build the best workplace possible, and enable us to create genuinely innovative, broadly useful products.


We are committed to our goal of creating the most inclusive workplace possible. As we strive to build an environment where everyone can thrive and be themselves, we will continue to investigate and challenge biases, while working to identify and remove obstacles to inclusion. If you need additional support or accommodation during the application process, please don't hesitate to let us know.