Role & Responsibilities :

- Design and implement enterprise security architecture aligned with business objectives, regulatory requirements, and industry best practices.

- Develop security architecture frameworks, standards, and reference models for applications, infrastructure, cloud, and network environments.

- Perform security reviews of enterprise solutions, applications, APIs, and infrastructure designs.

- Define and enforce security controls across cloud platforms (AWS/Azure/GCP), data centers, networks, and hybrid environments.

- Lead security architecture assessments, threat modeling, risk analysis, and mitigation planning.

- Design Zero Trust security models, identity and access management (IAM), privileged access management (PAM), and least-privilege frameworks.

- Collaborate with infrastructure, application development, DevOps, and business teams to embed security into technology initiatives.

- Provide security guidance for cloud migrations, digital transformation programs, and enterprise technology modernization.

- Review and approve security designs, architecture diagrams, technical standards, and solution proposals.

- Establish security patterns for applications, APIs, microservices, containers, and distributed systems.

- Define security requirements for vendors, third-party integrations, and managed service providers.

- Conduct security architecture gap assessments against frameworks such as ISO 27001, NIST CSF, CIS Controls, and industry regulations.

- Support incident response teams with architectural insights and root-cause analysis.

- Work with SOC teams to improve security monitoring, SIEM integration, threat detection, and response capabilities.

- Participate in cybersecurity governance forums and provide recommendations to senior leadership.

- Mentor security engineers and architects on design principles, controls, and best practices.

Preferred Candidate Profile :

Experience :

- 8 to 15 years of experience in cybersecurity, with significant experience in security architecture, enterprise security design, and risk management.

- Proven experience designing security solutions for large-scale enterprise environments.

- Experience working with organizations in banking, financial services, government, telecom, healthcare, or large enterprises is preferred.

- Experience leading security architecture reviews and advising technology stakeholders.

Strong knowledge of :

- Enterprise Security Architecture and Security Design Principles

- Cloud Security Architecture (AWS, Microsoft Azure, Google Cloud)

- Network Security Architecture (Firewalls, WAF, IDS/IPS, VPN, NAC)

- Identity Security (IAM, SSO, MFA, PAM, RBAC, Zero Trust)

- Application Security (API Security, Secure SDLC, DevSecOps)

- Data Security (Encryption, DLP, Data Classification, Key Management)

Soft Skills :

- Strong stakeholder management and communication skills.

- Ability to explain complex security concepts to technical and non-technical audiences.

- Strong analytical, problem-solving, and decision-making abilities.

- Experience working with CISO teams, enterprise architects, and business leaders.

- Ability to manage multiple security initiatives in a fast-paced environment.

UAE Market Preferences :

- Experience working in GCC/UAE organizations is an advantage.

- Familiarity with UAE cybersecurity regulations and frameworks such as :

1. UAE Information Assurance Standards (IAS)

2. Dubai Electronic Security Center (DESC) requirements

3. NESA/UAE cybersecurity guidelines

4. Regulatory requirements for banking and government sectors

- Experience with large transformation programs and multinational environments is highly valued.