Information Security Lead

Role & responsibilities

• Design and review secure system and application architectures.
• Conduct and support threat modeling and risk assessment activities.
• Identify and document attack surfaces and potential vulnerabilities during design reviews.
• Act as a security advisor to project and architecture teams throughout the development lifecycle.
• Capture and manage technical security observations in SD Elements, ensuring traceability and remediation tracking.
• Engage with stakeholders across development, architecture, and infrastructure teams to embed security into solution design.
• Align solutions with enterprise architecture frameworks (e.g., TOGAF, SABSA) and internal security policies.
• Participate in architecture review boards and security governance forums.
• Support secure design validation for cloud, on-prem, and hybrid environments.

Preferred candidate profile

• 912 years of experience in information security or architecture-related roles.
• CISSP Certification is a MUST
• Strong background in application security, secure development lifecycle, and architecture design.
• Hands-on experience in threat modeling and understanding of attack surfaces.
• Past experience in VAPT execution and remediation handling (even though not part of the current responsibilities)
• Experience using SD Elements for security requirements and issue tracking is mandatory.
• Proficient in architecture frameworks such as TOGAF, SABSA, or NIST.
• Good knowledge of cloud security (preferably Azure) and secure DevOps practices.
• Excellent communication skills to collaborate with global stakeholders and technical teams.