Job Description

Established in 1981 with a single store in the Northwest of England, the JD Group is a leading omni-channel retailer of Sports Fashion, Outdoors and Gyms with our colleagues working in stores across several retail fascias in many markets around the world.



JD Sports Fashion Plc was listed on the London Stock Exchange in 1996 and has been a FTSE100 publicly quoted company since 2019 and continues to grow in the UK and internationally.



We want to be the leading global omnichannel retailer in the sports and outdoor industry. To be a part of this successful company and help us to achieve this you will have the desire to ingrain our strategic goals of being a people-led, innovative and customer-focused organisation which provides operational excellence whilst identifying new areas of growth as part of our day to day objectives.

Role Purpose:

We are looking for an experienced Security Architect to join our growing Information Security team.



Reporting to the Global Head of Security Strategy, Architecture & Engineering and working closely with IT technology and architecture functions, you will develop and implement information security architecture and technology solutions to ensure information security and compliance requirements of the organisation as we go through our Digital Transformation and modernisation and beyond.



The Security Architect is responsible for developing and executing a global security strategy, ensuring the protection of sensitive information across the JD Group

Key Responsibilities:

Implement and lead the Security Architecture capability across JD Sports, formalising principles through reference architectures, diagrams, and procedures. Research, evaluate, and implement security technologies, process and services to reduce cyber risk and enhance performance. Develop and maintain a global security strategy, including encryption, tokenization, anonymization, and Data Loss Prevention (DLP). Ensure information security aspects of applications and services safeguard JD Sports' data, IP, customers, and brand reputation. Provide security guidance to business technology teams, ensuring security is integrated from the outset of projects throughout their lifecycle Translate security requirements into architectural blueprints and patterns, balancing risk, budget, and operational challenges. Ensuring compliance with regulatory standards such as GDPR and PCI DSS. Provide subject matter expertise and assess security measures, recommending improvements in collaboration with IT teams. Build and maintain relationships with technology vendors and business partners. In conjunction with JD's Managed Detect and Respond services, develop and maintain incident response plans for data security breaches, ensuring quick and effective resolution.

Qualifications and Skills:

Professional certifications in Information Security or Cybersecurity (e.g. Certified Information Systems Security Professional, Certified Information Security Manager). 5+ years of IT security experience working on data security enforcement. Strong understanding of security frameworks like NIST, ISO 27001, and CIS Controls, and their application to enhance security and ensure compliance Proven expertise in designing and implementing data security controls in geographically dispersed and hybrid cloud environments. Hands-on experience with modern enterprise-level data protection tools, including Data Loss Prevention (DLP), Digital Rights Management (RMS), data encryption/tokenization, and data discovery. Strong familiarity with Microsoft security solutions, such as AD RMS, Azure RMS, and Microsoft Purview for data governance, classification, and compliance monitoring. In-depth knowledge of PKI, including certificate lifecycle management, encryption protocols, and secure key management practices. Ability to lead and execute large, complex projects related to data security (e.g. introduction of a global DLP solution, replacement of a PKI environment) Considerable technical writing proficiency, oral presentation skills, problem solving and decision-making skills Experience in using architecture methodologies such as TOGAF and SABSA. Practical experience in Agile/DevOps organizations and cultures

We know our colleagues work tirelessly to make JD Sports the success it is today and in turn, we offer them some amazing benefits including staff Discount On JD Group and other brands within the organisation and personal development opportunities to learn and develop at work.



Thank you for your time



#JD