Enterprise Cyber Security Architect

About the role

The Enterprise Cyber Security Architect will lead the design and governance of the organisation’s security architecture across cloud, on‑premise and hybrid environments. Reporting to the Enterprise Architecture function, the role ensures that systems, platforms and data meet stringent regulatory and industry standards while supporting business innovation.

Key responsibilities

• Define and maintain the enterprise security architecture strategy, including principles, standards and reference models.
• Design secure architecture patterns for cloud (AWS, Azure, OCI), on‑premise and hybrid workloads.
• Embed security‑by‑design and DevSecOps practices into all technology initiatives and CI/CD pipelines.
• Lead the development of IAM, network security, data protection and endpoint security architectures.
• Conduct security architecture reviews, risk assessments and threat modeling for new and existing solutions.
• Ensure compliance with banking regulations, data protection laws and standards such as ISO 27001, NIST, PCI DSS.
• Evaluate, select and implement security tools (SIEM, SOAR, EDR/XDR, DLP, firewalls, encryption key management).
• Provide technical leadership, mentorship and governance of security policies and architecture guardrails.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity or a related discipline.
• 15+ years of IT experience with at least 5‑7 years in security architecture or cybersecurity leadership.
• Proven experience in banking or financial‑services environments and regulatory compliance.
• Relevant certifications such as CISSP, CISM, CCSP or CEH are highly preferred.
• Strong communication and stakeholder‑engagement abilities.

Required skills

• Network security platforms: Palo Alto, Check Point, Cisco security.
• Identity & Access Management: IAM, PAM, SSO, MFA.
• Cloud security: AWS, Azure, OCI security frameworks.
• Data protection, encryption and key‑management solutions.
• Security frameworks and standards: NIST, ISO 27001, CIS, Zero Trust.
• DevSecOps tooling and processes.
• Security operations tools: SIEM, SOAR, EDR/XDR, DLP.
• Enterprise architecture frameworks: TOGAF, ITIL.