Chief Security Architect

Role overview

Responsibilities

• Develop cybersecurity strategy and secure enterprise, cloud, network, application, data, and infrastructure architectures.
• Establish security principles, standards, frameworks, policies, controls, and governance processes.
• Review technology, systems, applications, technical designs, and vendor solutions for security risks and compliance.
• Define requirements and mitigation strategies; lead threat modeling and security risk assessments.
• Integrate security into technology projects with IT, DevOps, cloud, infrastructure, software-development, and engineering teams.
• Support monitoring, detection, incident response, vulnerability management, investigations, audits, and remediation.
• Document reference architectures and technical standards; guide senior management and mentor security teams.
• Manage strategic security initiatives and recommend improvements to security posture, resilience, scalability, and cost-effectiveness.

Security domains

• Relevant areas include enterprise security architecture, cybersecurity strategy, cloud, network, application, data, identity, endpoint, infrastructure, and API security.
• Other areas include Zero Trust, security engineering, threat modeling, risk assessment, vulnerability management, security operations, incident response, and security monitoring.
• Additional areas include security governance and controls, DevSecOps, cryptography, security testing, third-party security, compliance, and technology risk management.

Qualifications and experience

• Proven experience in a senior security architecture, cybersecurity architecture, security engineering management, or similar role.
• Strong architecture, cybersecurity, risk management, technical problem-solving, leadership, communication, and stakeholder-management capabilities.
• Bachelor's or Master's degree in cybersecurity, information security, computer science, IT, engineering, or a related discipline.
• Minimum 8+ years of relevant experience is preferred; senior security leadership experience is highly desirable.
• Experience with enterprise environments, cloud platforms, infrastructure, applications, networks, security governance, compliance, and risk management.
• Experience in the UAE or GCC and familiarity with the UAE business and cybersecurity environment are advantageous.

Frameworks and standards

• Experience with NIST Cybersecurity Framework, NIST security standards, ISO/IEC 27001, CIS Controls, Zero Trust principles, cloud security frameworks, and secure software development practices is preferred.
• Knowledge of applicable UAE cybersecurity and data-protection requirements is preferred.
• Relevant certifications such as CISSP, CISM, CCSP, SABSA, TOGAF, or equivalent are highly desirable.

What the employer offers

• Full-time or part-time employment options and a competitive compensation package.
• Collaborative working environment, career advancement, training, and professional-development opportunities.
• Opportunity to lead security architecture, work with advanced technologies, and contribute to security and digital transformation initiatives.