About the job Security Architect
We are seeking an experienced Security Architect to design, build, and maintain a secure enterprise IT environment. You will be responsible for assessing current security measures, identifying potential vulnerabilities, and implementing robust architecture frameworks and strategies to protect the organization's systems, data, and infrastructure from threats and attacks.
Key Responsibilities:
-
Design and implement enterprise security architecture across systems, applications, networks, and cloud platforms.
-
Conduct security assessments, threat modeling, and risk analysis for new and existing systems.
-
Develop and maintain security policies, standards, and best practices aligned with industry frameworks (e.g., NIST, ISO 27001, CIS Controls).
-
Collaborate with IT, DevOps, and software development teams to integrate security into the development lifecycle (DevSecOps).
-
Lead security technology evaluations and recommend security tools and solutions.
-
Provide technical guidance and mentoring to engineers and security team members.
-
Ensure compliance with relevant regulations and standards such as GDPR, HIPAA, PCI-DSS, or SOX.
-
Respond to and investigate security incidents, working with incident response teams.
-
Regularly review logs, reports, and dashboards for anomalies and improvement opportunities.
-
Stay current on the latest security threats, trends, and technologies.
Required Qualifications:
-
Bachelors or Masters degree in Computer Science, Cybersecurity, Information Technology, or related field.
-
5+ years of experience in cybersecurity, with at least 2 years in a Security Architect or equivalent role.
-
In-depth understanding of network and system security, identity and access management (IAM), encryption, and secure software development practices.
-
Experience with cloud platforms such as AWS, Azure, or Google Cloud Platform (GCP).
-
Familiarity with security tools such as firewalls, IDS/IPS, SIEMs, vulnerability scanners, endpoint protection, etc.
-
Strong knowledge of regulatory and compliance standards.
Preferred Certifications:
-
Certified Information Systems Security Professional (CISSP)
-
Certified Cloud Security Professional (CCSP)
-
Certified Information Security Manager (CISM)
-
AWS Certified Security Specialty or Azure Security Engineer Associate
-
TOGAF or SABSA certification