Security Architect

Senior IT Security Architect

We are looking for a seasoned IT Security Architect to strengthen a high-impact security function within a complex and evolving IT landscape. This role is focused on security architecture for IT projects and enterprise platforms - this is not a modern workplace / end-user security role.

As a key member of the IT organization, you will act as the go-to expert for security architecture, ensuring that security is embedded into the design of systems, applications, and integrations from the ground up.

You will work across a diverse environment spanning cloud platforms, data & analytics, APIs, and complex business applications, bringing a structured and risk-driven approach to security.

You will also represent security within governance bodies and play a central role in aligning security requirements with business and technical stakeholders.

Key Responsibilities

• Design, develop, and maintain security architectures, standards, and reusable patterns across multiple IT domains
• Provide hands-on security guidance to IT initiatives (EPICs/projects), ensuring "security by design" principles are consistently applied
• Perform risk assessments on new solutions (applications, integrations, cloud services) and define appropriate mitigation controls
• Translate high-level security policies and frameworks into actionable technical requirements, including for third-party vendors
• Act as a single point of contact for security architecture within governance forums (Architecture Boards, etc.)
• Contribute to and maintain security policies, processes, and guidelines
• Lead or support third-party security assessments within a broader TPRM framework
• Collaborate closely with architects, developers, product owners, and business stakeholders to ensure secure and pragmatic solutions
• Support internal and external security audits and compliance initiatives

Your Background

• 15+ years of experience in security architecture, specifically within IT project environments
• Strong exposure to:
  • Cloud platforms, SaaS, APIs, integrations
  • Custom development and commercial off-the-shelf solutions
• Proven ability to:
  • Define security requirements and controls
  • Write policies, standards, and supplier security clauses
• Experience with ISO 27001 / ISO 27005 frameworks
• Familiar with security architecture methodologies (e.g. SABSA, TOGAF security)
• Certifications such as CISSP, ISSAP, SABSA, or TOGAF are a plus
• Strong stakeholder management skills with the ability to influence both technical and non-technical audiences
  

To find out more about Huxley please visit www.huxley.com