Security Architect (SABSA Certified) - Doha/Riyadh

We are seeking an experienced Security Architect with SABSA certification to design, develop, and implement enterprise security architectures aligned with business objectives, risk management requirements, and regulatory standards. The ideal candidate will have strong expertise in security architecture frameworks, enterprise risk management, and the development of comprehensive security strategies that protect critical business assets and information systems. Key Responsibilities • Design and develop enterprise security architectures aligned with business goals, security requirements, and organizational risk appetite. • Apply the SABSA (Sherwood Applied Business Security Architecture) framework to develop business-driven security architectures and solutions. • Conduct security architecture assessments, identify gaps, and recommend appropriate security controls and remediation strategies. • Develop security architecture roadmaps, reference architectures, principles, standards, and design documentation. • Translate business requirements and risk assessments into technical security requirements and architectural solutions. • Evaluate and integrate security controls across network security, cloud security, identity and access management (IAM), application security, and data protection. • Conduct threat modeling, security risk assessments, and architecture reviews for enterprise systems and technology projects. • Ensure security architecture compliance with applicable regulatory requirements, industry standards, and organizational policies. • Collaborate with enterprise architects, infrastructure teams, cybersecurity teams, and business stakeholders to embed security into technology initiatives. • Provide architectural guidance for security transformation programs, cloud adoption, infrastructure modernization, and digital initiatives. • Review proposed technology solutions and ensure security requirements are incorporated throughout the system development and implementation lifecycle. • Maintain security architecture documentation, risk registers, control matrices, and governance artifacts. Required Qualifications & Experience • Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field. • Relevant experience in cybersecurity or enterprise security architecture, preferably within complex enterprise environments. • SABSA certification is mandatory, preferably at an appropriate practitioner or architect level. • Strong understanding of enterprise architecture principles, security design methodologies, and risk-based security approaches. • Experience developing security architectures, security patterns, reference models, and implementation roadmaps. • Knowledge of security governance, risk management, compliance, and control frameworks such as ISO 27001, NIST Cybersecurity Framework, and COBIT. • Strong understanding of network security, IAM, cloud security, application security, data protection, and infrastructure security. • Experience conducting security assessments, threat modeling, and risk analysis. • Excellent stakeholder management, communication, analytical, and documentation skills. Preferred Qualifications • Additional certifications such as CISSP, CISM, CCSP, or TOGAF. • Experience integrating SABSA with enterprise architecture frameworks and cybersecurity governance practices. • Familiarity with cloud platforms such as Microsoft Azure, AWS, or Google Cloud. • Experience working in regulated industries or large-scale enterprise environments.

Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field. Relevant experience in cybersecurity or enterprise security architecture, preferably within complex enterprise environments. SABSA certification is mandatory, preferably at an appropriate practitioner or architect level. Strong understanding of enterprise architecture principles, security design methodologies, and risk-based security approaches. Experience developing security architectures, security patterns, reference models, and implementation roadmaps. Knowledge of security governance, risk management, compliance, and control frameworks such as ISO 27001, NIST Cybersecurity Framework, and COBIT. Strong understanding of network security, IAM, cloud security, application security, data protection, and infrastructure security. Experience conducting security assessments, threat modeling, and risk analysis. Excellent stakeholder management, communication, analytical, and documentation skills.

Design and develop enterprise security architectures aligned with business goals, security requirements, and organizational risk appetite. Apply the SABSA framework to develop business-driven security architectures and solutions. Conduct security architecture assessments, identify gaps, and recommend appropriate security controls and remediation strategies. Develop security architecture roadmaps, reference architectures, principles, standards, and design documentation. Translate business requirements and risk assessments into technical security requirements and architectural solutions. Evaluate and integrate security controls across network security, cloud security, IAM, application security, and data protection. Conduct threat modeling, security risk assessments, and architecture reviews for enterprise systems and technology projects. Ensure security architecture compliance with applicable regulatory requirements, industry standards, and organizational policies. Collaborate with enterprise architects, infrastructure teams, cybersecurity teams, and business stakeholders to embed security into technology initiatives. Provide architectural guidance for security transformation programs, cloud adoption, infrastructure modernization, and digital initiatives. Review proposed technology solutions and ensure security requirements are incorporated throughout the system development and implementation lifecycle. Maintain security architecture documentation, risk registers, control matrices, and governance artifacts.