Enterprise Cyber Security Architect

About the role

The Enterprise Cyber Security Architect is a senior expert within the Enterprise Architecture function, responsible for defining and governing the organization’s cybersecurity architecture. The role ensures that systems, platforms, and data are protected through robust designs that meet regulatory and industry standards.

Key responsibilities

• Define and maintain the enterprise security architecture strategy, including principles, standards, and reference architectures.
• Design and implement secure patterns across cloud, on‑premises, and hybrid environments.
• Lead the development of IAM, network security, data protection, and endpoint security architectures.
• Conduct security architecture reviews, risk assessments, threat modeling, and vulnerability management.
• Ensure compliance with banking regulations, data protection laws, and standards such as ISO 27001, NIST, PCI DSS.
• Embed security controls into CI/CD pipelines (DevSecOps) and enforce governance, policies, and guardrails.
• Evaluate and implement security tools (SIEM, firewalls, EDR, DLP) and oversee encryption, key management, and incident‑response architecture.

Required profile

• Bachelor’s degree in Computer Science, Cybersecurity or related field.
• 15+ years of IT experience with 5–7 years in security architecture or leadership roles.
• Strong understanding of regulatory compliance in banking/financial services.
• Relevant certifications such as CISSP, CISM, CCSP or CEH are highly preferred.
• Excellent problem‑solving, communication and stakeholder engagement skills.

Required skills

• Network security: Palo Alto, Check Point, Cisco security.
• Identity & Access Management: IAM, PAM, SSO, MFA.
• Cloud security: AWS, Azure, OCI security frameworks.
• Data protection, encryption, key management.
• Security frameworks: NIST, ISO 27001, CIS, Zero Trust.
• DevSecOps experience and security tooling: SIEM, SOAR, EDR/XDR, DLP.
• Risk management, threat modeling, vulnerability assessment.
• Enterprise architecture frameworks: TOGAF, ITIL.