Director - Cyber Security Architect

Role Overview

We are looking for a seasoned Cybersecurity Solutions Architect to join our Information Security division and play a pivotal role in enhancing the security framework across all company divisions. Our environment entails a sophisticated technological ecosystem characterized by extensive platforms, applications, infrastructure, cloud services, and emerging technologies. The candidate will ensure security integration within enterprise technology solutions from their inception.

Key Responsibilities

• Design and define secure architectural frameworks for enterprise systems, encompassing applications, cloud infrastructure, networks, and digital platforms.
• Create security standards, principles, reference models, design patterns, and reusable security controls.
• Ensure security demands are integrated throughout all phases of the technology lifecycle—from concept through deployment and operations.
• Offer architecture guidance related to identity and access management, cloud, application, network, data, container, and infrastructure security.
• Formulate future-state security architectures that align with the organization's technological and commercial strategies.
• Review architecture and solution designs to identify security risks and control weaknesses; recommend mitigation strategies.
• Evaluate technology solutions for compliance with internal policies and regulatory standards; collaborate with project teams and vendors to implement security improvements.
• Engage in governance forums and technology reviews, providing risk-based security recommendations.
• Advise senior stakeholders on security architecture trends, challenges, and strategic initiatives; contribute to security roadmap development.
• Drive improvements in security maturity, control simplification, and resilience enhancement across the IT environment.
• Conduct threat modeling, risk analyses, and security assessments for critical assets; propose appropriate security controls.
• Work alongside risk and governance teams to document risks, compensating controls, and remediation plans.
• Perform technology evaluations and lead proof-of-concept assessments for new security tools and platforms.
• Maintain awareness of emerging cyber threats, regulatory updates, and technological innovations to guide security tool adoption.
• Provide technical leadership and mentorship across complex security initiatives; build collaborative relationships across multiple teams including infrastructure, cloud, application, audit, and business units.
• Clearly communicate complex security challenges and concepts to diverse audiences and support incident response and remediation efforts when architectural vulnerabilities are detected.

Qualifications and Experience

• Master's degree in Computer Science, Information Security, Cybersecurity, Engineering, or related fields.
• Minimum 15 years overall IT or cybersecurity experience, including at least 8 years focused on security architecture or engineering within enterprise security design.
• Proven ability to design and deploy scalable, robust, layered security frameworks.
• Thorough knowledge of enterprise technology ecosystems including cloud services, APIs, identity management systems, and data platforms.
• Expertise with containerization and orchestration tools such as Kubernetes and Docker, including security best practices covering image security, runtime protection, cluster security, secrets management, and network controls.
• Experience in AI security architecture, managing risks related to AI platforms, ML workloads, generative AI, LLMs, and AI-driven applications—covering model deployment, data privacy, prompt integrity, access restrictions, third-party models, and AI infrastructure security.
• Strong foundation in security architecture frameworks, threat modeling, secure design, and risk assessment methodologies.
• Demonstrated leadership in managing complex security projects and teams, with excellent stakeholder engagement skills.
• Exceptional analytical, problem-solving, and decision-making abilities.
• Ability to thrive in a complex, fast-paced enterprise environment requiring teamwork and collaboration.

Certifications

• Mandatory CISSP certification.
• Preferred architecture-focused credentials such as ISSAP.
• Additional certifications in cloud security, enterprise architecture, Kubernetes security, or AI security are advantageous.