Principal Applications Security Architect

Company Overview

Position Overview

Enterprise Security Architecture and Strategy

• Define enterprise security architecture, principles, reference architectures, security patterns, and technical standards.
• Lead architecture reviews for high-impact initiatives, products, platform changes, acquisitions, integrations, and technology transformations.
• Establish security design standards across cloud, applications, IAM, data protection, and zero-trust networks.
• Translate security, privacy, and compliance requirements into technical guidance.
• Create threat models, architecture risk assessments, security exception processes, and security design documentation.

AI Security and Governance

• Define security architecture patterns for AI-enabled products, machine-learning workloads, generative AI applications, and internal AI use cases.
• Assess AI threats such as prompt injection, data leakage, model abuse, insecure integrations, supply-chain risks, and unauthorised access.
• Establish controls for AI systems covering data classification, vendor risk, access management, monitoring, logging, testing, incident response, and governance.

Technical Leadership and Risk Management

• Assess complex security risks across multi-cloud environments, applications, data platforms, identity systems, networks, endpoints, and third-party integrations.
• Design scalable controls that balance risk reduction, engineering velocity, customer commitments, and regulatory obligations.
• Resolve architectural tradeoffs, address inherited technical risk, and prioritise security investments with technology leaders.
• Develop long-term remediation strategies and advise during significant security incidents.
• Mentor security engineers and architects.

Cross-Functional Collaboration and Governance

• Create collaboration networks across Security, Engineering, Infrastructure, Product, Data, IT, Privacy, and Legal.
• Develop risk-based decision frameworks and present recommendations to senior technical and business stakeholders.
• Represent Security in governance bodies, customer discussions, executive technical reviews, sales engagements, and audit or regulatory requirements.
• Drive adoption of approved security architecture standards and patterns.

Education and Experience

• A bachelor’s degree in Computer Science, Information Security, Engineering, or a related field is listed in the qualifications section.