Cybersecurity / Security Architect

About the role

Requirements

• · Develop and maintain enterprise security architecture in alignment with business strategy, enterprise architecture, cybersecurity strategy, and regulatory requirements.
• · Assess the current-state security architecture across applications, data, infrastructure, cloud, networks, identity, and integration environments.
• · Define target-state security architecture and security transformation roadmaps.
• · Develop security architecture principles, standards, patterns, reference architectures, and design guardrails.
• · Embed security-by-design and privacy-by-design requirements across enterprise and solution architecture activities.
• · Define Zero Trust architecture principles and implementation patterns across identity, devices, networks, applications, data, and workloads.
• · Define identity and access management architecture including authentication, authorization, privileged access, federation, and identity lifecycle controls.
• · Define security architecture for cloud, hybrid, on-premises, SaaS, and externally hosted environments.
• · Define network security architecture including segmentation, secure connectivity, firewalls, gateways, remote access, and trust boundaries.
• · Define application and API security architecture requirements across modern and legacy environments.
• · Define data security architecture including encryption, key management, data classification, data protection, and secure data exchange.
• · Support threat modeling, architecture risk assessment, and identification of security gaps and mitigation measures.
• · Review solution architectures and technical designs for compliance with enterprise security standards and control requirements.
• · Collaborate with enterprise architects, solution architects, cloud architects, application teams, infrastructure teams, data teams, and cybersecurity operations.
• · Support security technology evaluation, vendor assessment, technical due diligence, and architecture decisions.
• · Participate in architecture governance, security design reviews, and Architecture Review Boards.
• · Support alignment with applicable national cybersecurity controls, regulatory requirements, and recognized international security standards.
• Required Experience
• · Minimum 8-10 years of experience in cybersecurity, information security, infrastructure security, cloud security, solution architecture, or related disciplines.
• · At least 4-5 years of hands-on experience in Security Architecture or a comparable senior cybersecurity architecture role.
• · Demonstrated experience designing enterprise-scale security architectures across multiple technology domains.
• · Strong experience with identity, network, application, cloud, infrastructure, and data security architecture.
• · Experience supporting large-scale digital transformation, cloud transformation, or cybersecurity improvement programs.
• · Experience working with enterprise architecture teams, cybersecurity functions, technology teams, vendors, and senior stakeholders.
• Core Competencies
• · Enterprise Security Architecture
• · Security-by-design and privacy-by-design
• · Zero Trust Architecture
• · Identity and Access Management architecture
• · Cloud security architecture
• · Network and infrastructure security architecture
• · Application and API security architecture
• · Data security and information protection
• · Security controls and reference architectures
• · Threat modeling and architecture risk assessment
• · Security governance and architecture assurance
• · Cybersecurity compliance and regulatory alignment
• · Security technology evaluation
• · Stakeholder management and consulting
• Preferred Frameworks, Standards & Methods
• · SABSA
• · TOGAF
• · ArchiMate
• · NIST Cybersecurity Framework
• · NIST security architecture and control guidance
• · ISO/IEC 27001 and ISO/IEC 27002
• · Zero Trust architecture principles
• · Cloud Security Alliance guidance
• · Applicable national cybersecurity frameworks and controls
• · Secure software development and DevSecOps practices
• Preferred Tools & Technology Exposure
• · Enterprise architecture tools such as Bizzdesign, Sparx Enterprise Architect, Orbus/iServer, ARIS, or similar platforms.
• · Identity and access management, privileged access management, and federation technologies.
• · SIEM, SOAR, endpoint security, network security, and cloud security technologies.
• · Encryption, key management, certificate management, and data protection technologies.
• · Cloud security services across Microsoft Azure, AWS, Google Cloud, or equivalent platforms.
• · Security architecture, threat modeling, vulnerability management, and risk assessment tools.
• Preferred Qualifications & Certifications
• · Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related discipline.
• · SABSA certification is highly desirable.
• · CISSP, CCSP, CISM, or equivalent security certification is highly desirable.
• · TOGAF certification is desirable.
• · Relevant cloud security, identity, network security, or security architecture certifications are ad

Responsibilities

Skills

• enterprise security architecture
• security by design
• privacy by design
• Zero Trust architecture
• identity and access management (IAM) architecture
• cloud security
• network security architecture
• application and API security architecture
• data security architecture
• encryption and key management
• data classification and secure data exchange
• security governance and architecture governance
• threat modeling
• architecture risk assessment