Lead, Security Architecture & Engineering

Job Purpose:

The Lead - Security Architecture and Engineering plays a pivotal role in supporting the Head of Security Architecture and Engineering in crafting and implementing a robust information security architecture. This position requires a dynamic individual with hands-on experience in security architecture and engineering, contributing to the development and enhancement of the organization's security posture

Security Architecture Support:

• Collaborate with the Head of Security Architecture and Engineering to design and implement the organization's security architecture.

• Assist in the development of security blueprints for networks, applications, and systems.

Technical Expertise

• Provide technical expertise in security architecture, ensuring the implementation of industry best practices.

• Contribute to the design and review of security controls, recommending improvements where necessary.

Engineering Assistance

• Assist in the security engineering aspects such as the implementing and integrating security controls into infrastructure and application development processes.

• Lead efforts in developing and maintaining secure coding standards.

Risk Management

• Implement and maintain a risk management framework to guide security architecture decisions

Collaboration and Communication

• Collaborate with cross-functional teams and stakeholders to align security architecture with business objectives.

• Communicate security concepts effectively to both technical and non-technical audiences.

QUALIFICATIONS:

• BS/BA in ICT, Computer Science, any related field and equivalent work experience.
• At least (1) Professional Security certifications (e.g., CISSP, CISM, GSEC, etc.)
• Work experience in security at a banking industry or similar environment.
• Information Security, Network Security, IT Security, Cybersecurity, IT Risk Management, or related roles.
• Implementing a security framework, solution and service, from design, engineering through implementation for a medium to large organization.
• Expertise in designing, monitoring and optimizing security measures to protect information assets in cloud-based solutions setup (IaaS, PaaS, SaaS)
• Sound working knowledge of industry leading practices (ISO, NIST, SANS, COBIT) and legislative / regulatory compliance requirements (PCI, DPA, BSP, etc.)