Enterprise Security Architect

Let's Write Africa's Story Together!

Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.

Job Description

The key focus for the enterprise security architect is to perform enterprise security architecture strategy and planning aligned to business objectives, build and participate in architecture capability building, perform enterprise and solution security architecture and design management, investigate and adopt related security technology architecture trends, manage architecture risk and compliance, provide design and build governance and support and communicate and share knowledge around the security architecture practices, guardrails, blueprints and standards.

Responsibilities

IT Strategy and Planning

• Developing and aligning IT Strategies and Programmes to business objectives
• Defining Strategic Runway Themes for Security Architecture
• Develop required security architecture roadmaps containing target and transition landscapes
• Provide input into investment planning to transition the security architecture and practice
• Aligning security architecture roadmaps and runways to business planning and investments
• Define key security architecture runway initiatives to be delivered for the intentional security architecture
• Participate into business planning, costing and business case definition related to security architecture initiatives

Architecture Capability and Design Management

• Develop and maintain the Security architecture views and viewpoints
• Maintain the security artifacts in the set enterprise repository aligned to the rest of the architecture
• Manage the security architecture processes based on the requirements for each architype
• Manage change impact of the architecture with stakeholders
• Build the security architecture practice with embedded architects and engineers including the relevant methods, repository and tools
• Manage the security and related technology architecture transition
• Participate in the architecture practice development

Technology Research and Assessments

• Review trends with regards to the Security and related technologies
• Determine feasibility of these technologies in the organisational landscape
• Innovate with teams to determine more optimal approaches
• Conduct proof-of-concepts where options have been evaluated and considered feasible to explore
• Product and technology selection options, business case definition and sourcing evaluations

Risk, Governance and Compliance

• Identify and mitigate risks with stakeholders associated with a technology decision, design and implementation
• Ensure that architectures comply with the relevant policies, standards, and regulations
• Align architecture and engineering practices to Cyber Security Frameworks (NIST, ISO 27001)
• Conduct and participate in architecture reviews
• Integrate with other governance and compliance functions to ensure continuity in managing the investment and risk for the organisation
• Driving principles, practices, guardrails and standards within Security Centre of Excellence
• Maintain a decision register aligned to the enterprise governance on architecture decisions taken
• Establish and review Threat Modeling and Risk Assessment frameworks

Implementation Guidance and Collaboration

• Provide Security standards, guidance, guardrails, frameworks and tools to deliver effectively
• Collaborate with the delivery teams to share knowledge and to ensure the architecture objectives are achieved.
• Manage deviations with teams to reduce the risk to the organisation
• Drive or assist in the determine of the architecture options and selections
• Provide Security and related technical specialisation knowledge and experience into the solution design and build implementation
• Update security architecture after programme increments (Pis)

Communication and Knowledge Sharing

• Communicate the up-to-date views for the architecture
• Communicate and collaborate the relevant standards, practices, guardrails and tools to stakeholders
• Ensure that IT teams are well informed or trained in the respective architecture requirements
• Communicate and collaborate with stakeholders' relevant views on planning, technology assessments, risk, compliance, governance and project assessments
• Drive or participate in the relevant Centres of Excellence (CoEs)
• Communicating technology vision and roadmap aligned to the business strategy
• Participate in the architecture collaboration forums

MINIMUM QUALIFICATIONS/EXPERIENCE (REQUIRED FOR THE JOB)

• Matric
• Degree or diploma in Information Technology, Computer Science, Engineering OR relevant diploma / degree
• Experience:
• Requires a minimum of 7 years in a senior technology role with a proven track record in architecture/design and a minimum of 10-15 years relevant IT experience
• Requires a minimum of 5-7 years in a senior security architecture or related security role with relevant experience in cybersecurity, identity and access management, threat assessments and control, security incident management and operations, network security, data security and compliance, cryptography or cloud security

Skills

Action Planning, Adaptive Thinking, Business Requirements Analysis, Current State Assessment, Data Compilation, Data Controls, Executing Plans, Gaps Analysis, IT Architecture, IT Implementation, Market Analysis, Policies & Procedures, Product Development, Readiness Assessments, User Experience (UX) Design

Competencies

Business Insight Collaborates Cultivates Innovation Decision Quality Ensures Accountability Manages Complexity Nimble Learning Optimizes Work Processes

Education

NQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalent

Closing Date

22 April 2025 , 23:59

The appointment will be made from the designated group in line with the Employment Equity Plan of Old Mutual South Africa and the specific business unit in question.

The Old Mutual Story!