Information Security and Cyber Architect

A leading company is looking for an Information Security and Cyber Architect to join the Information Security department. The role includes supporting and guiding technological projects, planning and defining security solutions, ongoing work with infrastructure, systems, network, cloud, and development teams, as well as analyzing and handling security vulnerabilities and implementing information security standards and controls within the organization.

Responsibilities:

• Supporting projects from the planning stage and defining security solutions in On-Premise and Cloud environments.
• Providing consultation and guidance to development and DevOps teams on Secure SDLC, API security, and CI/CD processes.
• Analyzing, prioritizing, and handling information security findings, including working with SAST, DAST, SCA tools, and penetration tests.
• Supporting Remediation processes until security gaps are closed.
• Defining and characterizing information security controls for infrastructure, cloud, network, endpoint systems, and identity management.
• Assisting in the formulation, implementation, and enforcement of information security policies, standards, and guidelines.
• Performing measurement and monitoring of deviations and findings, tracking KPIs, and leading corrective actions.
• Supporting the secure implementation of AI-based solutions and managing the associated risks.
• Ongoing work with diverse technological interfaces to improve organizational cyber resilience.

Requirements:

• At least 2–3 years of experience in one or more of the following areas: Cyber Security Architecture, Security Engineering, DevSecOps, or AppSec.
• Technical background in IT infrastructure and/or implementation of cyber solutions.
• Experience in supporting and guiding projects and technological teams on information security matters.
• Practical experience in Secure SDLC and familiarity with OWASP.
• Experience in analyzing, prioritizing, and handling security vulnerability findings and supporting teams in Remediation processes.
• Familiarity with security architectures in On-Premise and Cloud environments.
• Knowledge of communication, networks, and protocols in an organizational environment.
• Experience working with development, systems, network, infrastructure, and cloud teams.
• Familiarity and understanding of the GRC field in the financial sector.
• High level of English, including participating in professional meetings, presenting topics, and drafting information security documents and requirements.

Advantages:

• Experience in an Enterprise organization or a multi-system environment.
• Experience with Azure and AWS.
• Background in software development or scripting.
• Professional certifications such as CISSP, CCSK, CEH, or cloud certifications.

The ability to work with many interfaces, analytical thinking, the ability to translate security requirements into applicable solutions, personal responsibility, and the ability to lead processes are required.