Enterprise Architect - Security

Decipher Bureau; City of Melbourne; Hybrid; AUD 240,000 - 300,000; Full time

Benefits offered by this job

Wellbeing platform

Health subsidy 35%

Good Health Day

Community leave

Flexible working

Salary packaging

Employee discounts

Inclusive culture

Job summary

Decipher Bureau is seeking a Security Enterprise Architect to lead a team of architects and shape the security architecture function from the ground up. You’ll have real visibility and a seat at the table with the CISO, and you’ll own the roadmap while developing the practice.

You’ll guide a growing security architecture function, manage lead and solution architects, and ensure alignment with NIST, ISO 27001, and APRA CPS 230/231 while delivering practical, secure outcomes.

Qualifications

• Proven EA experience in security - cannot be your first EA role
• 7+ years in security architecture within a corporate environment
• Experience leading architecture teams (lead and/or solution architects)
• Strong across IAM, cloud, AppSec, SIEM, network/endpoint, incident response
• Demonstrated application of NIST CSF, ISO 27001, and APRA CPS 230/231
• A solid technical background in cyber security
• Comfortable operating at senior and executive stakeholder level
• Financial services or health sector experience highly regarded
• TOGAF or SAFe familiarity
• CISSP or CISM desirable

Responsibilities

• Owning and evolving the security architecture roadmap
• Reviewing solutions and feeding architectural guidance directly to the CISO
• Finding practical, workable solutions to breached controls
• Balancing competing priorities across security and customer-facing programs
• Building strong relationships horizontally across other security streams
• Driving governance aligned to NIST, ISO 27001, and APRA CPS 230/231
• Developing architecture standards, patterns, and guardrails
• Engaging and influencing senior stakeholders up to executive level

Skills

IAM

Cloud security

AppSec

SIEM

Network security

Incident response

Executive engagement

Tools

TOGAF

SAFe

Job description

Howdy, Security Enterprise Architects. Fancy leading a team of architects and genuinely shaping a security architecture function from the ground up?

• The function is yours to shape. No inheriting someone else's mess.
• Hands-on, not hands-off. Lead architects who actually build things.
• Dotted line to the CISO from day one. Real seat at the table. Lead people.

Want real CISO-level visibility without the politics of a fully-baked, set-in-stone practice? If you've got serious security EA runs on the board and you're ready to put your stamp on something - keep reading.

Before the nitty gritty, here's what's in it for you:

• $270k inc. super | Flexibility available for the right person
• Permanent, full-time role based in Melbourne
• Access to a dedicated employee health and wellbeing platform - clinical services, psychology, nutrition, all from your phone
• 35% subsidy on private health insurance
• A Good Health Day each year - a day off, no questions asked, just for you
• 8 hours of community leave per year, plus employer-matched donations up to $1,000
• Flexible working approach - it's about outcomes, not where you sit
• Salary packaging options including motor vehicle
• Employee discounts across a broad range of retail, travel, and lifestyle partners
• A genuinely inclusive workplace - multiple employee networks, real commitment to diversity

So, what are you actually walking into?

This is a replacement role sitting inside a growing security architecture function within a significant, complex Australian organisation. You'll report into the Architecture Squad Lead with a dotted line to the CISO - that's real visibility, not a token reporting line.

The function is still maturing. That's the honest truth, and it's also the opportunity. You won't be inheriting someone else's half-baked decisions - you'll be the one making the calls, setting the roadmap, and building the practice the right way. You'll lead a team of lead and solution architects and be genuinely across what they're producing, not just rubber-stamping it from above.

Day to day, think along the lines of:

• Owning and evolving the security architecture roadmap
• Reviewing solutions and feeding architectural guidance directly to the CISO
• Finding practical, workable solutions to breached controls
• Balancing competing priorities across security and customer-facing programs - this one comes up a lot, so you'll need a strong answer for it
• Building strong relationships horizontally across other security streams
• Driving governance aligned to NIST, ISO 27001, and APRA CPS 230/231
• Developing architecture standards, patterns, and guardrails
• Engaging and influencing senior stakeholders up to executive level

This is not a role for someone walking into enterprise architecture for the first time. They need a proven Security EA - someone who has been here before and knows how to lead, not just contribute.

To be seriously considered, you'll need:

• Proven EA experience in security - cannot be your first EA role
• 7+ years in security architecture within a corporate environment
• Experience leading architecture teams (lead and/or solution architects)
• Strong across the security stack: IAM, cloud, AppSec, SIEM, network/endpoint, incident response
• Demonstrated application of NIST CSF, ISO 27001, and APRA CPS 230/231
• A solid technical background in cyber security
• Comfortable operating at senior and executive stakeholder level
• Financial services or health sector experience highly regarded
• TOGAF or SAFe familiarity
• CISSP or CISM desirable
• Melbourne-based | Australian Citizen or Permanent Resident only

If any of this has landed, there's plenty more context - technical and otherwise - that can be shared confidentially once we've had a chat.

Reach out to Kris Rosentreter at Decipher Bureau: