Senior Architect - Information Security ( UAE National )

Roads and Transport Authority; Dubai; On-site; AED 260,000 - 340,000; Full time

Job summary

Roads and Transport Authority in the United Arab Emirates invites an experienced security architect to define enterprise security architecture across the SDLC and govern risk-driven controls.

You will shape security policies, ISMS design patterns, and regulatory-aligned standards, collaborating with enterprise architecture to ensure secure designs and compliance across cloud and on‑premises environments.

Qualifications

• Bachelor's or Master's degree in CS/IT/Cybersecurity or related field.
• 6+ years of experience if master's; 8+ years if bachelor's.

Responsibilities

• Define enterprise security architecture and control baseline across the SDLC.
• Establish and maintain corporate information-security policies, standards, guidelines, and ISMS design patterns.
• Set Authority security programs and technical standards with Enterprise Architecture; ensure design signoffs.
• Lead architectural reviews for new digital initiatives and ensure security by design.
• Define and govern secure integration patterns for third-party systems and APIs.
• Coordinate with Security Operations Center on incident analysis and remediation.
• Lead IAM, SSO, classification, DLP, SIEM and related platform architectures; verify configuration hardening.
• Coordinate information-systems audits with stakeholders to drive remediation.

Skills

Cybersecurity

Governance

Risk management

Project Management

Security Architecture

Access Governance

Data Classification

Security Audit

Security Compliance

AI-Driven Security

Education

Bachelor's/Master's in CS/IT/Cybersecurity

Tools

IAM

SSO

SIEM

Job description

Roles and Responsibilities:

Strategy

• Define the enterprise security architecture and control baseline across the SDLC to reflect risk-management objectives, embedding security requirements in high-level designs and incorporating threat-modelling outcomes.
• Establish and maintain corporate information-security policies, standards, guidelines, and ISMS design patterns aligned to regulations and best practices, ensuring designs meet cloud and on-premises security baselines.
• Maintain risk-driven reference architectures and response scenarios; perform technology-risk assessments early in initiatives, highlight design-related risks/changes, and propose compensating controls.
• Set Authority security programs and technical standards with Enterprise Architecture; ensure projects align to architectural requirements through early design signoffs with business/ technology stakeholders.
• Define and govern secure integration patterns for third-party systems and APIs and ensure adherence during design and change.
• Evaluate emerging security technologies and trends; research solutions for mandated requirements and recommend adoption paths aligned to RTA strategy and architecture.
• Represent Information Security in enterprise architecture boards and technical steering committees to embed security perspectives in portfolio decisions.

Operations

• Provide specialist security input to RFPs; define and review security requirements and compliance language.
• Evaluate and approve changes per ITIL; improve change-management procedures and perform post-implementation audits.
• Lead architectural reviews for all new digital initiatives and ensure security by design across solutions and platforms.
• Define and govern secure integration patterns for third-party systems and APIs and ensure adherence during design and change.
• Coordinate with the Security Operations Center on incident analysis and response, applying lessons to strengthen architectural controls.
• Lead/advise on IAM, SSO, classification, DLP, SIEM and related platform architectures; verify configuration hardening.
• Conduct and guide security assessments and vulnerability analysis; recommend and oversee mitigation actions.
• Coordinate information-systems audits with stakeholders to assess control effectiveness and drive remediation.

Product/Process Improvement

• Develop and update security-architecture practices and standards, document target states, gaps, and migration roadmaps.
• Develop and maintain security policies, SOPs, and architecture documentation; report compliance metrics and audit artifacts; supervise and refine security training.

Job Qualifications & Requirements

Education

• Bachelor's degree/ master’s degree in computer science (CS)/ Information Technology (IT)/ Cybersecurity or related.

Experience

• 6+ Years in case of master’s degree (8+ years in case of bachelor’s degree).

Required Competencies

Technical Competencies

• Cybersecurity & Information Risk Management
• Governance, Risk & Excellence Programs
• Project Management
• Quality Management and Enhancement
• Security Architecture & Infrastructure Governance
• Access Governance & Data Classification
• Security Audit & Assurance
• Security Compliance Inspection & Audit
• AI-Driven Security Engineering & Simulation