Enterprise Architect - Digital Security

About Al-Futtaim Group

Originating in the 1930s as a trading firm, Al-Futtaim Group has evolved into a multifaceted and dynamic private enterprise headquartered in Dubai, UAE. The Group is organized into five divisions: automotive, financial services, real estate, retail, and healthcare, employing over 35,000 individuals across 20+ countries spanning the Middle East, Asia, and Africa. Partnering with over 200 global innovative brands, Al-Futtaim fosters growth and adapts to the evolving needs of its customers, underpinned by values of respect, excellence, collaboration, and integrity.

Role Overview

The Head of Security Architecture acts as the deputy to the Chief Information Security Officer (CISO), offering strategic guidance and hands-on expertise in crafting and executing comprehensive enterprise security architectures. This role combines deep technical knowledge with executive-level influence to strengthen the organization's security posture in alignment with business goals. Responsibilities include leading global security architecture and engineering teams, driving stakeholder engagement, and embedding a security-by-design mindset throughout the enterprise. The position is pivotal in advancing strategies related to AI security, Zero Trust frameworks, quantum resilience, and cloud-centric security approaches. Key initiatives include cloud transformation, data protection, and securing software development lifecycles.

Key Responsibilities

• Set and champion the vision, strategy, and roadmap for enterprise security architecture, ensuring alignment with overall business and technology strategies.
• Lead interdisciplinary initiatives to integrate security seamlessly into business operations, digital transformations, and the adoption of emerging technologies.
• Provide thought leadership around evolving threat landscapes, including AI security, Zero Trust architectures, quantum preparedness, and cloud-native security technologies.
• Refresh and institutionalize the Group's Security Strategy, establish a Security Service Catalogue, define operating models, and promote ways of working.
• Design, implement, and enforce enterprise-wide security standards, frameworks, and architectural patterns.
• Supervise security design reviews, risk assessments, and architecture approval processes across projects, platforms, and external ecosystems.
• Collaborate with governance, risk, and compliance teams to maintain adherence to global security regulations and industry standards.
• Integrate security architecture with enterprise risk frameworks, including third-party and vendor risk management.
• Enhance the Security Architecture operating model to improve consistency, scalability, and satisfaction among stakeholders.
• Create and maintain reference architectures, technical standards, and security controls across applications, infrastructure, cloud environments, and data assets.
• Steer secure implementation of innovative technologies such as AI/ML, cloud-native platforms, Zero Trust, DevSecOps, and advanced identity management systems.
• Oversee cloud transformation, data protection strategies, identity management, and secure software development lifecycle practices with architectural governance.
• Assess and integrate cutting-edge cybersecurity technologies to improve resilience and defense mechanisms.
• Collaborate with engineering and security operations centers to embed architectural principles in daily security operations, threat detection, and incident response procedures.
• Support security incident investigations by providing architectural insights and root cause analyses.
• Continuously enhance layered security architectures and automate security control implementations at scale.
• Recruit, mentor, and lead high-performing architecture and engineering teams while promoting a culture of accountability and innovation.
• Define team roles, responsibilities, and professional development trajectories.
• Advocate for a collaborative, risk-aware organizational culture, serving as both leader and coach bridging technical expertise with business strategy.

Essential Qualifications and Experience

• A bachelor's or master's degree in Information Security, Computer Science, or a related field.
• Relevant professional certifications such as CISSP, ISSAP, GIAC GDSA, CASP+, SecurityX, CISM, CCSP, SABSA, TOGAF, or equivalents.
• At least 18 years of progressively responsible experience in information security, including a minimum of 8 years in enterprise security architecture or leadership roles.
• Comprehensive knowledge of modern security frameworks including Zero Trust models, cloud-native security, DevSecOps practices, and identity and access management (IAM).

Additional Candidate Guidance

Applicants are encouraged to thoroughly review the job details, clearly demonstrate their suitability for this opportunity, and submit a well-crafted, personalized CV to enhance their candidacy. The recruitment process ensures alignment not just on skills and behaviours but also values consistent with respect, integrity, collaboration, and excellence. Dedicated talent acquisition professionals are available throughout the process to assist candidates.