Security Architect
This role will be responsible for providing technical security advice and guidance with a focus on the Group / South Africa organisation. This candidate will be involved in multiple change projects and be responsible for producing and publishing tailored Security best practice guidance.
Key Responsibilities
- Providing security advice requirements and guidance to the business when delivering new systems or updates to existing to ensure Security by design.
- Performing security-focused risk assessment on new systems / services and changes to existing to ensure they are within risk tolerance.
- Working with the business to review designs and ensure that they are in line with existing security principles patterns standards and best practise.
- Work with the business to define document and implement core security patterns standards and guidelines.
- Reviewing the current security processes within your area of focus to ensure optimisation and coverage.
- Be the initial security point of contact for your region and route any questions to the relevant teams.
- Work with the wider security architecture team to ensure a standardised approach to security is defined and followed.
- Collaborate with IT teams to make sure the correct security controls and measures are in place before implementation.
Requirements :
Bachelors degreeor equivalent experiencein computer science IT engineering or related fieldAn MSc Information Securityor equivalentwould bean advantage.Information Security and / or Information Technology certifications such as CISSP etc. are preferred.Azure Security Certifications are preferred.Experience of common frameworks such as NIST CIS ISO27k and MITREExperience in using SABSA valuableReview solution designs and recognise security concerns.Work with vendors to understand the mitigations and make recommendations.Be able to pragmatically review and understand where the security risk could outweigh the business benefits.Represent both the business to security and security to the business.Help make the business understand the importance of considering security in designs.Ability to support the business in the delivery of security requirements.Understanding of Threat Modelling frameworks and implementation e.g. STRIDEAbility to deconstruct complex environments and navigate conflicting project requirements.Work with the wider security team to mature security processes and patterns.Prior experienceworkingin Information securityis essential.Prior experienceof working as a security architect is essential.Prior experienceof creating security artefacts is preferred.Key Skills
APIs,Pegasystems,Spring,SOAP,.NET,Hybris,Solution Architecture,Service-Oriented Architecture,Adobe Experience Manager,J2EE,Java,Oracle
Employment Type : Full Time
Experience : years
Vacancy : 1