Chief Security Architect

Role overview

Architecture and strategy

• Develop and maintain the security architecture strategy and roadmap.
• Design secure enterprise, cloud, network, application, infrastructure, and data architectures.
• Establish architecture principles, standards, frameworks, policies, and technical guidelines.
• Lead architecture reviews for systems, applications, technologies, and infrastructure.
• Assess cybersecurity and technology risks and develop mitigation strategies.

Security delivery and governance

• Define security requirements for enterprise applications, cloud platforms, networks, endpoints, databases, and critical systems.
• Develop Zero Trust, identity and access management, network security, application security, and data-security architectures.
• Lead threat modeling and risk assessments; support monitoring, threat detection, vulnerability management, and incident response.
• Align controls with business requirements and applicable UAE regulations; support security audits and assessments.
• Develop architecture documentation, technical standards, reference architectures, and security patterns.

Leadership and collaboration

• Work with IT, DevOps, cloud, infrastructure, software-development, engineering, compliance, legal, risk, and audit teams.
• Provide technical leadership to senior management and mentor security architects, engineers, and technical security teams.
• Lead strategic cybersecurity projects and continuous improvement of security architecture, controls, and governance.

Security areas

• Enterprise security architecture, cybersecurity strategy, and security engineering.
• Cloud, network, application, data, endpoint, and infrastructure security.
• Identity and access management, Zero Trust, threat modeling, risk assessment, vulnerability management, and incident response.
• Security monitoring, governance, controls, DevSecOps, API security, cryptography, and technology-risk management.

Frameworks and standards

• Experience with relevant frameworks and standards is preferred, including NIST Cybersecurity Framework, NIST standards, ISO/IEC 27001, and CIS Controls.
• Zero Trust principles, cloud-security frameworks, secure software development practices, and applicable UAE cybersecurity and data-protection requirements are listed.

Qualifications and experience

• A bachelor's or master's degree in cybersecurity, information security, computer science, information technology, engineering, or a related discipline.
• At least 8 years of relevant cybersecurity, information-security, or security-architecture experience is preferred.
• CISSP, CISM, CCSP, SABSA, TOGAF, or equivalent certification is highly desirable.
• UAE or GCC experience is an advantage; understanding of the UAE cybersecurity environment is preferred.

Candidate background

• The posting seeks a senior cybersecurity professional with enterprise security architecture and leadership experience.
• Candidates should understand cloud, network, application, infrastructure, identity, and data security; governance; regulatory requirements; and risk management.
• The role calls for strong architectural problem-solving, communication, presentation, stakeholder management, and decision-making skills.

What the employer offers

• The posting describes a senior security-architecture leadership opportunity in the United Arab Emirates.
• It lists full-time or part-time options, competitive compensation, professional development, career advancement, and opportunities to shape enterprise security architecture.