Security Architecture & Engineering Leader

بنك مسقط; Muscat; On-site; OMR 50,000 - 90,000; Full time

Job summary

Bank Muscat is seeking Head of Security Design and Engineering to lead the design and engineering phases of the security-control lifecycle across infrastructure, applications, cloud and identity. You will translate control objectives into secure architectures and automated controls.

You will build security-by-design practices, threat modelling, and architecture governance, coordinating with IT, risk and compliance to ensure measurable security outcomes in a regulated financial-services

Qualifications

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, Engineering or a related discipline; a relevant master’s degree is advantageous.
• 10-15 years, including at least 5 years leading security architecture or engineering teams.
• Demonstrated experience in a regulated, high-availability or financial-services environment is strongly preferred.

Responsibilities

• Own security architecture principles, guardrails, patterns and reference architectures.
• Direct engineering and integration of platform, infrastructure, cloud, application and identity security capabilities.
• Embed security into SDLC and DevSecOps, including SAST, DAST, SCA, secrets, API, container and Kubernetes security.
• Maintain the security-technology inventory, lifecycle, ownership, licensing, use cases and technical roadmap.
• Establish security-by-design, threat-modelling and architecture-review services for projects and material changes.
• Drive policy-as-code, orchestration and automation to improve control consistency, speed and evidence.

Skills

Security architecture

Cloud security

DevSecOps

Threat modelling

Automation

Security governance

SAST/DAST/SCA

Policy as code

Stakeholder management

Written communication

Education

Bachelor’s degree in Information Security/Cybersecurity/CS/IT/Engineering

Master’s degree advantageous

Tools

NIST CSF 2.0

ISO/IEC 27001

Job description

Bank Muscat is seeking Head of Security Design and Engineering to lead the design and engineering phases of the security-control lifecycle across infrastructure, applications, cloud and identity. You will translate control objectives into secure architectures and automated controls.

You will build security-by-design practices, threat modelling, and architecture governance, coordinating with IT, risk and compliance to ensure measurable security outcomes in a regulated financial-services