Role & responsibilities :

- Lead the Security Architecture function and manage, mentor, and allocate a team of Security Architects across strategic programmes and technology initiatives.

- Own security architecture principles, standards, reference architectures, patterns, roadmaps, and exception governance.

- Ensure architecture decisions are converted into implemented controls with clear ownership, acceptance criteria, testing evidence, operational handover, and measurable outcomes.

- Lead the architecture and implementation governance of SIEM, WAF, Privileged Identity Management (PIM), Data Loss Prevention (DLP), email security, mobile application security, and other enterprise security capabilities.

- Establish and run security architecture review forums, design assurance, threat modelling, risk acceptance, and remediation tracking.

- Lead CTEM across scoping, discovery, prioritisation, validation, mobilisation, remediation governance, and executive reporting.

Preferred candidate profile :

- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; a relevant master's degree is preferred.

- Minimum 12 years of progressive cybersecurity experience, including substantial responsibility in security architecture, security engineering, or enterprise security technology implementation.

- Demonstrated experience leading Security Architects or senior security engineering professionals in a complex enterprise environment.

- Proven delivery experience implementing and operationalising multiple enterprise security capabilities, including SIEM, WAF, PIM or PAM, DLP, email security, and mobile application security.

- Experience leading security architecture reviews, threat modelling, design assurance, technology selection, vendor evaluation, implementation governance, testing, and transition to operations.

- Hands-on understanding of CTEM, vulnerability management, attack-surface management, security control validation, penetration testing, and risk-based remediation governance.

Preferred Certifications :

- CISSP and/or ISSAP; SABSA; TOGAF; CCSP; CISM; GIAC architecture, cloud, incident response, or penetration-testing certifications; relevant cloud security certifications from Microsoft Azure, Amazon Web Services, or Google Cloud.