Cyber Security Architect

Job Description :

We are seeking an experienced Cyber Security Architect to lead the organizations security strategy and operations. This role is the primary liaison for senior stakeholders, responsible for architecting and maintaining comprehensive security frameworks across product development and operations. The ideal candidate combines deep technical expertise with strong leadership to mentor the Cyber Security Analysts team and champion security excellence organization-wide.

Key Responsibilities :1. Strategic Leadership & Governance :

• Define and drive the security vision, strategy, and roadmap aligned with business objectives; present posture, risk assessments, and recommendations to executive leadership.

• Lead governance initiatives; establish and maintain security policies, standards, guidelines, and certifications.

• Manage security budget, resource allocation, and vendor relationships.

2. Team Leadership & Mentorship :

• Lead, manage, and mentor the Cyber Security Analysts team; provide technical guidance and professional development opportunities.

• Foster a culture of security awareness through regular knowledge-sharing sessions, training programs, and a security champions program across engineering teams.

• Build and scale the security team in line with organizational growth and the evolving threat landscape.

3. Security Architecture & Engineering :

• Design and implement security architectures for cloud, on-premises, and hybrid environments; define and enforce secure architecture patterns, reference architectures, and design principles.

• Conduct architecture reviews for new products, features, and infrastructure changes; evaluate and recommend security technologies and solutions.

• Establish and maintain security baselines, hardening standards, and configuration management practices.

4. Application Security, Secure SDLC & DevSecOps :

• Implement and mature Secure SDLC processes; oversee SAST, DAST, and SCA programs; lead threat modelling for critical applications; establish secure coding standards and drive vulnerability remediation.

• Champion DevSecOps practices : integrate security controls and automated testing into CI/CD pipelines; implement IaC security scanning, container/Kubernetes security, and security monitoring/alerting.

• Drive security automation initiatives to improve efficiency and reduce manual effort.

5. Compliance & Risk Management :

• Lead compliance initiatives for ISO 27001, SOC 2, GDPR, FIPS, STIG, and other applicable standards; support audits and maintain compliance evidence and documentation.