[Hybrid] Security Architect

Scope of work

• Providing Security Architecture consultancy style subject matter expertise.
• Includes handing difficult conversations and influencing colleagues in realising the need for security.
• Delivering the conceptual and logical security design abstractions to identify threats and vulnerabilities as part of the solution.
• Analysing systems, applications and system components to identify risks and propose mitigating security controls and countermeasures.
• Manage significant architectural decisions involving senior management, sponsors and projects to ensure secure outcomes and appropriate governance practices.
• Leveraging and updating existing control reference patterns.
• Proactively managing risk and assurance requirements, developing new design artefacts to outline integration approaches, use-cases, re-use, and technical reference for Enterprise security capabilities.
• Coaching and mentoring others in the practical application of security and risk management concepts, principles and strategies, and relevant industry standards.
• Commit and execute on timely, high quality security output to support Projects’ and stakeholders’ motivations, resulting in the favourable management of Cyber risks.
• Improve design & architectural efficiencies through leveraging and/or establishing processes, guidelines, methodologies and approaches.
• Demonstrating professional etiquette, transparency, proactivity, teamwork & resourcefulness.

Job Requirements

Must have:

• 7+ years experience in the Technology industry
• 2+ years Security Architecture Experience OR 5+ years Solution Architecture Experience with significant security exposure
• Strong English communication skills (both verbal & written)
• Degree in Computer Science / information systems or equivalent technical qualification
• Appreciates complex solutions and technology landscapes, balancing trade-offs between business, technical and security drivers
• Awareness of the Product/Vendor market with the ability to execute on industry trends and good practices
• High proficiency in English

Nice to have:

• Security Certifications (e.g., CISSP, CCSP etc)
• Architecture or technology related certifications (e.g. SABSA, Cloud Security)
• Adaptable to various risk & security management frameworks