Lead Security Architect

We are seeking an experienced Lead Security Architect to join a large-scale cybersecurity transformation and governance program within a leading financial services environment. This role will be responsible for defining, governing, and advancing enterprise security architecture practices while ensuring alignment with business objectives, regulatory requirements, and industry best practices. The successful candidate will play a key role in security architecture governance, architecture reviews, threat modeling, security standards, and strategic roadmap development. Key Responsibilities • Lead and govern enterprise cybersecurity architecture initiatives. • Conduct security architecture assessments and design reviews for strategic projects and platforms. • Develop and maintain enterprise security reference architectures and architecture standards. • Support Architecture Review Boards (ARB) and provide security guidance on technology initiatives. • Create and maintain Architecture Decision Records (ADRs). • Develop security architecture roadmaps aligned with business and security objectives. • Define security architecture requirements across applications, infrastructure, cloud, networks, and data platforms. • Perform security risk assessments and threat modeling activities. • Evaluate solution architectures and recommend appropriate security controls and design improvements. • Establish and maintain security baselines, standards, and hardening requirements. • Collaborate with enterprise architects, infrastructure teams, cloud teams, application teams, and security stakeholders. • Ensure compliance with applicable regulatory requirements and industry security frameworks. • Support continuous improvement of cybersecurity architecture governance and operating models. Required Qualifications • Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline. • Extensive experience in Enterprise Security Architecture and Cybersecurity Governance. • Strong expertise in: • Enterprise Security Architecture • Security Governance • Security Design Reviews • Security Reference Architectures • Architecture Review Boards (ARB) • Architecture Decision Records (ADR) • Threat Modeling • Security Risk Assessments • Security Standards and Controls • Security Architecture Roadmaps • Hands-on experience with: • Network Security Architecture • Infrastructure Security Architecture • Cloud Security Architecture • DevSecOps and Secure Development Practices • Identity and Access Management (IAM) • Excellent stakeholder management and communication skills. Preferred Certifications • CISSP (Certified Information Systems Security Professional) • SABSA (Sherwood Applied Business Security Architecture) and/or TOGAF • CCSP (Certified Cloud Security Professional) Preferred Experience • Experience within banking, financial services, government, or other highly regulated industries. • Strong knowledge of cybersecurity frameworks and standards including: • ISO 27001 • NIST Cybersecurity Framework • CIS Controls • Cloud Security Best Practices • Experience supporting large-scale cybersecurity transformation programs. Contract Duration: 12 Months - Extendable

Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related discipline. Extensive experience in Enterprise Security Architecture and Cybersecurity Governance. Strong expertise in: Enterprise Security Architecture; Security Governance; Security Design Reviews; Security Reference Architectures; Architecture Review Boards (ARB); Architecture Decision Records (ADR); Threat Modeling; Security Risk Assessments; Security Standards and Controls; Security Architecture Roadmaps. Hands-on experience with: Network Security Architecture; Infrastructure Security Architecture; Cloud Security Architecture; DevSecOps and Secure Development Practices; Identity and Access Management (IAM). Excellent stakeholder management and communication skills.

Lead and govern enterprise cybersecurity architecture initiatives. Conduct security architecture assessments and design reviews for strategic projects and platforms. Develop and maintain enterprise security reference architectures and architecture standards. Support Architecture Review Boards (ARB) and provide security guidance on technology initiatives. Create and maintain Architecture Decision Records (ADRs). Develop security architecture roadmaps aligned with business and security objectives. Define security architecture requirements across applications, infrastructure, cloud, networks, and data platforms. Perform security risk assessments and threat modeling activities. Evaluate solution architectures and recommend appropriate security controls and design improvements. Establish and maintain security baselines, standards, and hardening requirements. Collaborate with enterprise architects, infrastructure teams, cloud teams, application teams, and security stakeholders. Ensure compliance with applicable regulatory requirements and industry security frameworks. Support continuous improvement of cybersecurity architecture governance and operating models.