Security Architect - Shape Secure, Resilient Cloud Systems

Southern Cross Medical Care Society; New Zealand; Hybrid; NZD 120,000 - 160,000; Full time

Job summary

Southern Cross Health Insurance seeks a Senior Security Architect to shape secure, resilient technology across a broad set of platforms. You will work with engineers and delivery teams to embed security from the start and influence design decisions with proportionate controls.

In this hands-on role you’ll translate risk into practical guidance for technical and non-technical stakeholders while operating in a hybrid on-premises/cloud environment.

Qualifications

• Senior technical security role with broad experience in secure architectures.
• Experience in regulated or high-trust environments (health, insurance, financial services).
• Ability to translate technical risk into plain language for engineers and stakeholders.

Responsibilities

• Partner with product, platform, data and engineering teams to build security in early rather than reviewing it at the end.
• Review designs, data flows and identity models to identify risk and recommend practical, proportionate mitigations.
• Develop reusable security patterns, guardrails and decision records for consistent delivery.
• Help assess emerging risk areas, including AI-enabled capability and supply chain security.
• Advise technology and delivery leaders on risk trade-offs and remediation priorities.
• Coach teams to recognise common security patterns and attacker behaviours.

Skills

Security architecture

Cloud security

Identity management

Regulated environments

Stakeholder communication

Tools

ISO27001

PCI DSS

CIS

NIST

Job description

Southern Cross Health Insurance seeks a Senior Security Architect to shape secure, resilient technology across a broad set of platforms. You will work with engineers and delivery teams to embed security from the start and influence design decisions with proportionate controls.

In this hands-on role you’ll translate risk into practical guidance for technical and non-technical stakeholders while operating in a hybrid on-premises/cloud environment.