Senior Architect - Information Security

Roles and Responsibilities: Strategy • Define the enterprise security architecture and control baseline across the SDLC to reflect risk-management objectives, embedding security requirements in high-level designs and incorporating threat-modelling outcomes. • Establish and maintain corporate information-security policies, standards, guidelines, and ISMS design patterns aligned to regulations and best practices, ensuring designs meet cloud and on-premises security baselines. • Maintain risk-driven reference architectures and response scenarios; perform technology-risk assessments early in initiatives, highlight design-related risks/changes, and propose compensating controls. • Set Authority security programs and technical standards with Enterprise Architecture; ensure projects align to architectural requirements through early design signoffs with business/ technology stakeholders. • Define and govern secure integration patterns for third-party systems and APIs and ensure adherence during design and change. • Evaluate emerging security technologies and trends; research solutions for mandated requirements and recommend adoption paths aligned to RTA strategy and architecture. • Represent Information Security in enterprise architecture boards and technical steering committees to embed security perspectives in portfolio decisions. Operations • Provide specialist security input to RFPs; define and review security requirements and compliance language. • Evaluate and approve changes per ITIL; improve change-management procedures and perform post-implementation audits. • Lead architectural reviews for all new digital initiatives and ensure security by design across solutions and platforms. • Define and govern secure integration patterns for third-party systems and APIs and ensure adherence during design and change. • • Coordinate with the Security Operations Center on incident analysis and response, applying lessons to strengthen architectural controls. • Lead/advise on IAM, SSO, classification, DLP, SIEM and related platform architectures; verify configuration hardening. • Conduct and guide security assessments and vulnerability analysis; recommend and oversee mitigation actions. • Coordinate information-systems audits with stakeholders to assess control effectiveness and drive remediation. Product/Process Improvement • Develop and update security-architecture practices and standards, document target states, gaps, and migration roadmaps. • Develop and maintain security policies, SOPs, and architecture documentation; report compliance metrics and audit artifacts; supervise and refine security training. Job Qualifications & Requirements Education • Bachelor's degree/ master’s degree in computer science (CS)/ Information Technology (IT)/ Cybersecurity or related. Experience • 6+ Years in case of master’s degree (8+ years in case of bachelor’s degree). Required Competencies Technical Competencies • Cybersecurity & Information Risk Management • Governance, Risk & Excellence Programs • Project Management • Quality Management and Enhancement • Security Architecture & Infrastructure Governance • Access Governance & Data Classification • Security Audit & Assurance • Security Compliance Inspection & Audit • AI-Driven Security Engineering & Simulation Show more Show less

Education: Bachelor's degree or Master's degree in Computer Science (CS), Information Technology (IT), Cybersecurity, or related field. Experience: 6+ years with a master's degree (8+ years with a bachelor’s degree).

Strategy: Define the enterprise security architecture and control baseline across the SDLC; establish and maintain corporate information-security policies, standards, guidelines, and ISMS design patterns; maintain risk-driven reference architectures and response scenarios; set Authority security programs and technical standards with Enterprise Architecture; define and govern secure integration patterns for third-party systems and APIs; evaluate emerging security technologies and trends; represent Information Security in enterprise architecture boards. Operations: Provide specialist security input to RFPs; evaluate and approve changes per ITIL; lead architectural reviews for new digital initiatives; oversee secure integration patterns for third-party systems; coordinate with Security Operations Center on incident analysis and response; lead/advise on IAM, SSO, classification, DLP, SIEM and related platform architectures; conduct security assessments and vulnerability analysis; coordinate information-systems audits and remediation. Product/Process Improvement: Develop and update security-architecture practices and standards; develop and maintain security policies, SOPs, and architecture documentation; report compliance metrics and audit artifacts; supervise and refine security training.