Overview
Set security architecture and make sure solutions are secure by design, from threat model to design authority.
What you'll do
- Define security architecture principles, patterns and standards
- Review solution designs and set the security controls they need
- Lead threat modelling for new platforms and major changes
- Design identity, network, data and cloud security architecture
- Align controls with regulation and frameworks such as NIST or ISO 27001
- Record security decisions and risks through design authority
- Guide engineering teams through delivery
What you bring
- Security architecture experience on enterprise programmes
- Cloud security architecture on AWS, Azure or GCP
- Identity and access management design
- Network segmentation and zero-trust principles
- Threat modelling methods such as STRIDE
- Frameworks such as NIST CSF, ISO 27001 or CIS Controls
- Clear architecture documentation
You don't need every item on this list. If most of it fits, send your CV.
Nice to have
- CISSP, CCSP or SABSA certification
- TOGAF
- Industry security regulation
- Application security experience