Lead System Security Architect

Job Summary

Lead the design and governance of enterprise security architecture across a diverse group of businesses. Drive security strategy, risk management, and the adoption of modern security technologies to protect critical IT and OT environments.

Responsibilities

• Lead the design, development, and implementation of enterprise security architectures across IT, cloud, network, application, and operational technology (OT) environments.
• Partner with the Group CISO to define and execute cybersecurity strategies, governance frameworks, and security roadmaps.
• Develop and maintain enterprise security standards, architecture principles, reference models, and best practices.
• Provide technical leadership on secure solution design, threat modelling, and security architecture reviews for business initiatives and technology projects.
• Establish and enhance governance, risk, and compliance (GRC) processes across multiple business entities.
• Conduct security risk assessments, identify vulnerabilities, and recommend mitigation strategies.
• Evaluate emerging security technologies and recommend solutions to strengthen the organisation's security posture.
• Collaborate with business, technology, audit, and compliance teams to ensure security controls align with regulatory and business requirements.
• Lead cross-functional security initiatives and coordinate security activities across multiple subsidiaries.
• Monitor evolving cyber threats, including AI and quantum computing risks, and recommend strategies to improve organisational resilience.
• Support project and programme delivery by providing security guidance throughout the solution lifecycle.
• Prepare reports, security documentation, and executive updates for senior management.

Requirements

• Bachelor's Degree in Computer Science, Computer Engineering, Information Security, or a related discipline.
• Minimum 5 years of experience as a System Security Architect, with a strong background in enterprise security architecture.
• Previous experience in IT infrastructure, enterprise architecture, or cloud architecture.
• Strong knowledge of security architecture principles, secure system design, and threat modelling.
• Experience with Governance, Risk & Compliance (GRC), security frameworks, and enterprise risk management.
• Good understanding of cloud security, Zero Trust architecture, network security, identity and access management, cryptography, and secure software development.
• Hands-on experience with security frameworks such as NIST Cybersecurity Framework (CSF), CIS Controls, MITRE ATT&CK, and OWASP Top 10.
• Experience conducting security assessments, security architecture reviews, and risk analysis.
• Strong project or programme management experience.
• Excellent communication, documentation, stakeholder management, and presentation skills.
• Professional certifications such as CISSP, SABSA, TOGAF, CCSP, CISM, or GIAC are highly desirable.