Lead Security Architect

Description:

• As a Lead Security Architect, you'll play a crucial role in ensuring our organization's information systems/operational technology is secure and protected against cyber threats.
• You will serve as the primary security advisor to business leaders, project teams and technology stakeholders, ensuring solutions meet security, compliance and risk management requirements.
• You'll help us identify potential risks and vulnerabilities, and develop effective mitigation strategies to protect our assets and support our vision of being a leader in our industry.

Key responsibilities will include:

• Provide a security service steer to the projects and programs, on security related matters.
• Own and define security scope/architecture for a variety of projects deployed globally.
• Drive security requirements, architectures, patterns and approaches via the company's processes.
• Engage with development teams to advise and consult on security requirements.
• Work closely with project teams, DevOps teams to ensure solution complies with security requirements and that risks are appropriately managed.
• Provide technical security input as required by the security policy lead.
• Coordinate technical design/review activities with various segments within the Security team.
• Ensure that key risks and issues are identified, addressed, and resolved in a manner that satisfies the business.
• Conduct regular 1st line risk assessments to identify potential cyber threats and vulnerabilities to the business's systems and data.
• Conduct 1st line supply chain assurance for suppliers, in co-ordination with the 2nd line Vendor Assurance team.
• Conduct reviews of new or existing Vendor contracts to ensure appropriate clauses and addendums are included with the 3rd party contracts.
• Develop and implement strategies to mitigate cyber risks and enhance the business's security posture.
• Stay up-to-date with the latest cyber threats and trends, and recommend appropriate security controls and countermeasures.
• Maintain documentation and reporting on security-related activities, including risk assessments, incident response, and compliance audits.

Qualifications and Experience

• Bachelor's degree in a relevant discipline, or an equivalent combination of education, training, and experience.
• 7+ years of related experience across at least three or more domains such as networking design or implementation, cloud security, vulnerability management, building security programs, purple teaming exercises, incident handling or remediation of cybersecurity incidents.
• Strong analytical and problem-solving skills for making sound decisions under pressure.
• Ability to influence, build relationships, and demonstrate team leadership skills in fast-paced, ambiguous, and autonomous professional service environment.