Security Architect Manager

Job Responsibilities:

• Develop secure design principles and frameworks tailored to the bank’s IT and business environment.
• Incorporate security best practices into the design of systems, applications, and network infrastructure.
• Ensure designs address confidentiality, integrity, availability, and regulatory compliance requirements.
• Collaborate with business and IT teams to embed security early in project lifecycles.
• Continuously update design standards to reflect emerging threats and technological advancements.
• Conduct thorough security reviews of proposed and existing IT architectures within the Bank.
• Identify potential security gaps, vulnerabilities, and risks in architectural designs.
• Provide recommendations to enhance security posture while maintaining business agility.
• Ensure architectural compliance with internal policies, industry standards, and regulatory mandates.
• Work closely with project teams to ensure security requirements are understood and implemented.
• Document and communicate security requirements to all relevant stakeholders.
• Update and refine requirements based on evolving threat landscapes and compliance changes.
• Validate that security solutions meet defined requirements and design specifications before deployment.
• Scope security testing, including penetration testing and vulnerability assessments, on new solutions.
• Ensure integration of security controls does not adversely affect system performance or user experience.
• Collaborate with quality assurance and operations teams to monitor solution effectiveness post-deployment.
• Drive continuous improvement by incorporating feedback and lessons learned into future architecture.

Job Requirements:

• A bachelor’s degree in Cybersecurity, Information Systems, Computer Science, Computer Engineering, or a related field from a reputable university.
• 6+ years of relevant experience in the financial sector, in security architecture governance, including participation in Architecture Review Boards (ARBs).
• Strong working knowledge of cybersecurity frameworks and standards (CBE Cybersecurity Framework, NIST Cybersecurity Framework, ISO 27001, PCI-DSS, etc).
• Maintaining at least one active certificate of Information/Cybersecurity such as CISSP, CISM, or TOGAF.

Work Location: In person