Manager Security Architecture & Assurance

Purpose:

The Manager, Security Architecture & Assurance is responsible for leading the security architecture review and assurance function across technology projects, platforms, and strategic initiatives. The role ensures that security risks are identified and addressed early in the solution lifecycle and that all technology investments align with the organization's security policies, architectural standards, regulatory obligations, and risk appetite.

The position manages the end-to-end security review and approval process for projects across cloud, applications, infrastructure, data, and third-party solutions. Acting as a trusted advisor to technology and business stakeholders, the Manager provides security oversight, establishes security requirements, and leads a team of security architects and analysts responsible for security assessments and design reviews.

Key Responsibilities & Main Duties:

Security Architecture Governance

• Lead security architecture reviews for projects, programmes, and technology initiatives.
• Establish and maintain security architecture standards, reference architectures, and secure design principles.
• Ensure security requirements are incorporated into solution designs from project inception through implementation.
• Provide formal security approval and sign-off for projects meeting required security standards.

Security Risk Management

• Oversee security risk assessments across cloud, data centre, network, application, and digital environments.
• Review and challenge technology designs to identify security risks, vulnerabilities, and control gaps.
• Evaluate risk mitigation plans and determine residual risk exposure.
• Support risk acceptance decisions and present security recommendations to governance forums.

Team Leadership

• Manage and mentor Security Architects and Security Assurance professionals.
• Define team objectives, performance measures, and development plans.
• Build capability in cloud security, application security, threat modelling, and security architecture disciplines.
• Foster a collaborative and security-by-design culture across the organization.

Project Security Assurance

• Define and manage the project security review methodology.
• Participate in Architecture Review Boards, Design Authorities, and Change Advisory Boards.
• Ensure consistent application of security controls, security patterns, and design standards.
• Track security findings and ensure remediation activities are completed prior to production deployment.

Stakeholder Management

• Partner with IT Architecture, Infrastructure, Data, Development, Engineering and Delivery teams.
• Provide expert security advice to project sponsors, architects, and technology leaders.
• Influence technical and business decisions through risk-based recommendations.
• Escalate significant security risks to senior management where appropriate.

Compliance & Regulatory Alignment

• Ensure adherence to frameworks and standards including:
• ISO 27001
• NIST Cybersecurity Framework
• NIST SP 800-53
• CIS Controls
• SABSA
• OWASP
• COBIT
• Support internal and external audit activities.
• Maintain evidence of security review and approval processes.

Experience & Qualifications

Required:

• 10+ years of experience in information security, technology architecture, or cyber security.
• 5+ years leading security architecture, security assurance, or technology risk functions.
• Experience managing security reviews for large-scale projects and technology transformations.
• Hands-on experience with cloud security across AWS, Azure, and GCP environments.
• Strong understanding of Artificial Intelligence, network, infrastructure, data, application, and identity security.

Preferred Certifications:

• CISSP
• CISM
• CCSP
• SABSA
• TOGAF
• CRISC
• ISO 27001 Lead Implementer or Lead Auditor