Cybersecurity / Security Architect

Role overview

Architecture responsibilities

• Develop and maintain enterprise security architecture, assess current-state environments, and define target-state designs and transformation roadmaps.
• Create security principles, standards, patterns, reference architectures, and design guardrails; embed security-by-design and privacy-by-design.
• Define Zero Trust, identity and access management, cloud, network, application, API, and data security architecture.
• Support threat modeling, architecture risk assessment, gap mitigation, solution design reviews, architecture governance, and security assurance.
• Collaborate with architecture, technology, cybersecurity, vendor, and delivery stakeholders; support technology evaluation and technical due diligence.
• Align designs with national cybersecurity controls, regulatory requirements, and recognized international standards.

Required experience

• 8–10 years in cybersecurity, information security, infrastructure security, cloud security, solution architecture, or related disciplines.
• At least 4–5 years of hands-on Security Architecture experience or comparable senior cybersecurity architecture experience.
• Demonstrated enterprise-scale architecture experience spanning multiple domains, including identity, network, application, cloud, infrastructure, and data security.
• Experience supporting large-scale digital or cloud transformation or cybersecurity improvement programs.
• Experience working with enterprise architecture teams, cybersecurity functions, technology teams, vendors, and senior stakeholders.

Preferred frameworks and tools

• Preferred frameworks and methods include SABSA, TOGAF, ArchiMate, NIST guidance, ISO/IEC 27001 and 27002, Cloud Security Alliance guidance, national cybersecurity frameworks, and secure software development and DevSecOps practices.
• Preferred tool exposure includes enterprise architecture platforms, identity and access management, privileged access management, federation, SIEM, SOAR, endpoint, network and cloud security, encryption, key management, and risk assessment tools.
• Cloud platform exposure may include Microsoft Azure, AWS, Google Cloud, or equivalent platforms.

Preferred qualifications and attributes

• A bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related discipline is preferred.
• SABSA certification is highly desirable. CISSP, CCSP, CISM, TOGAF, and relevant cloud, identity, network security, or security architecture certifications are desirable or advantageous.
• The role calls for analytical and risk-based thinking, communication, facilitation, stakeholder management, attention to detail, and a consulting mindset.
• Candidates should translate cybersecurity requirements into practical controls and balance security, business value, usability, cost, and operational practicality.