Job Description

Beginning of the main content section.Return to the home pagePrintable Format Job Description - Senior Architect - information Security (26002806)Job Description Senior Architect - information Security - (26002806) Job Description StrategyDefine the enterprise security architecture and control baseline across the SDLC to reflect risk-management objectives, embedding security requirements in high-level designs and incorporating threat-modelling outcomes.Establish and maintain corporate information-security policies, standards, guidelines, and ISMS design patterns aligned to regulations and best practices, ensuring designs meet cloud and on-premises security baselines.Maintain risk-driven reference architectures and response scenarios; perform technology-riskassessments early in initiatives, highlight design-related risks/changes, and propose compensating controls.Set Authority security programs and technical standards with Enterprise Architecture; ensure projects align to architectural requirements through early design signoffs with business/technology stakeholders.Evaluate emerging security technologies and trends; research solutions for mandated requirements and recommend adoption paths aligned to RTA strategy and architecture.Represent Information Security in enterprise architecture boards and technical steering committees to embed security perspectives in portfolio decisions.OperationsProvide specialist security input to RFPs; define and review security requirements and compliance language.Evaluate and approve changes per ITIL; improve change-management procedures and perform post-implementation audits.Lead architectural reviews for all new digital initiatives and ensure security by design across solutions and platforms.Define and govern secure integration patterns for third-party systems and APIs and ensure adherence during design and change.Coordinate with the Security Operations Center on incident analysis and response, applying lessons to strengthen architectural controls.Lead/advise on IAM, SSO, classification, DLP, SIEM and related platform architectures; verify configuration hardening.Conduct and guide security assessments and vulnerability analysis; recommend and oversee mitigation actions.Coordinate information-systems audits with stakeholders to assess control effectiveness and drive remediation.Product/Process ImprovementDevelop and update security-architecture practices and standards, document target states,gaps, and migration roadmaps.Develop and maintain security policies, SOPs, and architecture documentation; report compliance metrics and audit artifacts; supervise and refine security training. Qualifications Job Qualifications & RequirementsEducationBachelor's degree/ Master’s degree in Computer Science (CS)/ Information Technology (IT)/ Cybersecurity or related.Experience6+ Years in case of Master’s degree (8+ years in case of Bachelor’s degree)QualificationCertifications such as Certified Information Systems Security Professional (CISSP), SABSA Job Category: Information SecurityAdvertiser: Roads and Transport AuthorityDepartment: Security & Monitoring Educational-level: BachelorRequired Nationality: All Nationalities (Priority for UAE National) Suitable for people with determination: NoMonthly Salary: UnspecifiedSchedule-Time: Full timeJob Posting: 21/09/2026Unposting Date: 21/10/2026

Responsibilities

Strategy: Define the enterprise security architecture and control baseline across the SDLC to reflect risk-management objectives, embedding security requirements in high-level designs and incorporating threat-modelling outcomes. Establish and maintain corporate information-security policies, standards, guidelines, and ISMS design patterns aligned to regulations and best practices, ensuring designs meet cloud and on-premises security baselines. Maintain risk-driven reference architectures and response scenarios; perform technology-risk assessments early in initiatives, highlight design-related risks/changes, and propose compensating controls. Set Authority security programs and technical standards with Enterprise Architecture; ensure projects align to architectural requirements through early design signoffs with business/technology stakeholders. Evaluate emerging security technologies and trends; research solutions for mandated requirements and recommend adoption paths aligned to RTA strategy and architecture. Represent Information Security in enterprise architecture boards and technical steering committees to embed security perspectives in portfolio decisions.

Operations: Provide specialist security input to RFPs; define and review security requirements and compliance language. Evaluate and approve changes per ITIL; improve change-management procedures and perform post-implementation audits. Lead architectural reviews for all new digital initiatives and ensure security by design across solutions and platforms. Define and govern secure integration patterns for third-party systems and APIs and ensure adherence during design and change. Coordinate with the Security Operations Center on incident analysis and response, applying lessons to strengthen architectural controls. Lead/advise on IAM, SSO, classification, DLP, SIEM and related platform architectures; verify configuration hardening. Conduct and guide security assessments and vulnerability analysis; recommend and oversee mitigation actions. Coordinate information-systems audits with stakeholders to assess control effectiveness and drive remediation.

Product/Process Improvement: Develop and update security-architecture practices and standards, document target states, gaps, and migration roadmaps. Develop and maintain security policies, SOPs, and architecture documentation; report compliance metrics and audit artifacts; supervise and refine security training.

Senior Architect - information Security

Job Description

Requirements

Responsibilities

Skills Required

Interested in this role?

Similar jobs across the Gulf