Security Architect

Role Overview

We are seeking an experienced Security Architect to design, review, and govern enterprise security architectures that protect critical business systems, applications, and data. This role will work closely with business stakeholders, project teams, solution architects, and engineering teams to ensure security requirements are embedded throughout the solution lifecycle while enabling business transformation.

The successful candidate will provide technical leadership in security architecture, identify security risks, recommend appropriate security controls, and ensure solutions align with enterprise security standards, governance frameworks, and risk appetite.

Key Responsibilities

Security Architecture & Design

• Design secure architecture solutions for enterprise applications, cloud platforms, infrastructure, and digital transformation initiatives.
• Develop conceptual and logical security architectures aligned with business and technology strategies.
• Define security patterns, reference architectures, and reusable security design principles.
• Ensure security is incorporated throughout the solution delivery lifecycle.

Security Risk Assessment

• Review solution designs and identify potential security risks, threats, and vulnerabilities.
• Perform security architecture reviews and provide recommendations to mitigate identified risks.
• Define compensating controls where business requirements prevent implementation of standard security controls.
• Ensure compliance with enterprise security policies and industry standards.

Security Governance

• Provide expert security architecture guidance to project teams, solution architects, and business stakeholders.
• Participate in architecture governance forums and design review boards.
• Support security governance processes, technology standards, and security assurance activities.
• Ensure projects comply with enterprise security requirements and risk management practices.

Security Control Design

Design and recommend security controls across domains including:

• Identity & Access Management (IAM)
• Data Protection & Data Security
• Application Security
• Infrastructure Security
• Network Security
• Cloud Security
• Security Information & Event Management (SIEM)
• Vulnerability Management
• Configuration & Hardening Standards
• Secure Communications

Stakeholder Management

• Partner with business leaders, project managers, solution architects, and engineering teams to understand business requirements.
• Communicate security risks and technical recommendations to both technical and non-technical stakeholders.
• Influence solution decisions while balancing business objectives with security requirements.
• Build trusted relationships across technology and business functions.

Continuous Improvement

• Develop and maintain enterprise security reference architectures.
• Evaluate emerging technologies and assess associated security implications.
• Promote secure design principles and industry best practices.
• Mentor junior architects and engineers on security architecture and risk management.

Required Skills & Experience

Technical Skills

• Enterprise Security Architecture
• Security Design & Review
• Risk Assessment & Threat Modelling
• Cloud Security (AWS, Azure and/or GCP)
• Identity & Access Management (IAM)
• Network Security
• Application Security
• Data Security
• Vulnerability Management
• Security Governance & Compliance
• Enterprise Architecture Frameworks
• Security Standards & Best Practices

Soft Skills

• Strong analytical and problem-solving skills
• Excellent stakeholder management and communication
• Ability to influence senior technical and business leaders
• Strong decision-making and strategic thinking
• Commercial awareness with the ability to balance business and security requirements
• Negotiation and relationship management skills

Qualifications

Mandatory

• Bachelor's Degree in Computer Science, Information Technology, Information Systems, Cyber Security, or a related discipline.
• 10+ years of experience in Information Technology.
• 5+ years in Security Architecture or equivalent Solution Architecture with strong security expertise.

Preferred Certifications

• CISSP
• SABSA
• CCSP
• AWS Security Specialty
• Microsoft Azure Security Engineer
• TOGAF (advantage)
• Other Cyber Security or Enterprise Architecture certifications

Skills: Information Security, Penetration Testing, Security Audit, Certified Information Security Manager (CISM), Teamwork, Microsoft Office, Microsoft Word, Cybersecurity, Network Security, Customer Service