Head of Enterprise Security Architecture & Projects

CO_AFSLGO Apex Fund Services Holdings Ltd (AFSHL Group Ops); Cape Town; On-site; ZAR 1,800,000 - 3,000,000; Full time

Job summary

Apex Group is seeking a Head of Enterprise Security Architecture & Projects to lead the security architecture function and project delivery. This senior role governs secure design, sets architectural direction, and ensures delivery of security initiatives aligned to business priorities.

You will lead a team of Security Architects and deliver enterprise-wide security programs while partnering with Technology, Engineering, and Data teams to embed security by design.

Qualifications

• 10+ years in cybersecurity, enterprise architecture, or senior tech roles in complex environments.
• 8+ years in senior management roles within security architecture or cyber program delivery.
• Ability to translate strategy into secure design and governance across large enterprises.

Responsibilities

• Define and own enterprise security architecture strategy aligned to technology roadmap and risk appetite.
• Ensure security architects and project managers meet KPI's and business deliverables.
• Develop roadmaps to expand team capabilities for emerging standards and technologies.
• Lead and manage Security Architects across application, cloud, infrastructure, data, and emerging tech domains.
• Provide governance as the final security design authority for major programs and initiatives.
• Translate security strategy into reference architectures, patterns, and roadmaps.
• Oversee delivery of security projects ensuring alignment with architecture intent.
• Establish and maintain governance processes including design reviews and risk decisions.
• Partner with Technology, Engineering, Cloud, Data, and Business teams to embed security by design.

Skills

Enterprise Security Architecture

Security Governance

Cloud & Hybrid Security

Security Program Delivery

Executive Communication

Education

Bachelor's in Information Security / related field

SABSA / TOGAF certification

CISSP / CCSP preferred

Job description

The Apex Group was established in Bermuda in 2003 and is now one of the world's largest fund administration and middle office solutions providers. Our business is unique in its ability to reach globally, service locally and provide cross-jurisdictional services. With our clients at the heart of everything we do, our hard-working team has successfully delivered on an unprecedented growth and transformation journey, and we are now represented by over circa 13,000 employees across 112 offices worldwide.

Your career with us should reflect your energy and passion. That's why, at Apex Group, we will do more than simply 'empower' you. We will work to supercharge your unique skills and experience. Take the lead and we'll give you the support you need to be at the top of your game. And we offer you the freedom to be a positive disrupter and turn big ideas into bold, industry-changing realities. For our business, for clients, and for you

The Role

Apex is seeking a Head of Enterprise Security Architecture & Projects to lead its enterprise security architecture function and security project delivery capability. This is a senior leadership role accountable for setting architectural direction, governing secure design, and ensuring the successful delivery of security-led initiatives across the organization. You will provide strategic leadership to all Security Architects and a dedicated security project team, acting as the central authority for security architecture decisions while ensuring security initiatives are delivered effectively, consistently, and in alignment with business priorities.

Key Responsibilities

• Define and own the enterprise security architecture strategy aligned to Apex's technology roadmap, risk appetite, and regulatory obligations.
• Ensure Security architects and project managers meet KPI’s and business deliverables.
• Develop roadmaps to enable the expansion of team capabilities to keep up with emerging standards and technologies.
• Lead and manage all Security Architects across application, cloud, infrastructure, data, and emerging technology domains.
• Provide architectural governance and act as the final security design authority for major programs, platforms, and initiatives.
• Translate security strategy, principles, and standards into practical reference architectures, patterns, and roadmaps.
• Oversee the delivery of security-related projects and programs, ensuring alignment between architecture intent and execution.
• Establish and maintain security architecture governance processes, including design reviews and risk-based decision-making.
• Partner closely with Technology, Engineering, Cloud, Data, and Business teams to embed security by design.
• Ensure consistency of security controls and architectural standards across the enterprise.
• Identify architectural risks and technical debt, proposing pragmatic remediation strategies.
• Communicate security architecture decisions, trade-offs, and risks clearly to senior leadership and governance forums.
• Support audit, regulatory, and assurance activities related to security architecture and program delivery.
• Execute delegated tasks as deemed appropriate by the Group CISO and other empowered Group Cyber leadership authorities, ensuring timely and effective completion in alignment with organizational priorities.
• Support the Group Cyber Strategy end-to-end, driving alignment of all activities, decisions, and deliverables with strategic objectives and business outcomes.

Areas of Specialization

• Enterprise Security Architecture: Definition of security principles, develop and oversee the development of reference architectures, and own governance of security architecture deployment across the organization
• Application, Cloud & Infrastructure Architecture: Secure design of applications, platforms, networks, and hybrid/multi-cloud environments.
• Data, AI & Emerging Technologies: Security architecture for data platforms, AI-enabled solutions, and new technology adoption.
• Security Programs & Projects: End-to-end ownership of security initiatives, from business requirements gathering through delivery and implementation governance
• Architecture Governance & Advisory: Risk-based architectural decision-making, design assurance, and strategic advisory services.

Qualifications

• Formal qualification in Information Security, Computer Science, Engineering, or related technology discipline.
• Recognised security architecture qualifications such as SABSA or TOGAF, with demonstrated security architecture application.
• Professional security certifications such as CISSP or CCSP are strongly preferred.
• Cloud architecture or security certifications (e.g. Azure, AWS or OCI) are desirable.
• Programme or project delivery qualifications are beneficial.

Required Experience & Skills

• Experience: 10+ years in cybersecurity, enterprise architecture, or senior technology roles within complex environments.
• 8+ years in senior management positions within security architecture, technical leadership, or cyber & security program delivery roles.
• Technical Expertise: Proven experience designing and governing enterprise-wide security architectures across multiple domains.
• Strong understanding of security architecture frameworks and methodologies (e.g., SABSA, TOGAF, Zero Trust).
• Experience leading and coordinating teams of security architects across different specialist areas.
• Demonstrated ability to drive security programs and projects from strategy through to delivery.
• Strong understanding of cloud and hybrid architectures (Azure, AWS, OCI) and modern enterprise platforms.
• Knowledge of Standards: Deep understanding of relevant security standards and frameworks, including but not limited to SOC1 & SOC2 NIST Cybersecurity Framework ISO/IEC 27001 and related standards CSA Cloud Controls Matrix (CCM) OWASP principles and secure coding guidelines Zero Trust principles for modern enterprise security.
• Ability to interpret, apply, and enforce these standards within enterprise architecture and security program delivery.
• Proven experience integrating compliance requirements into practical security design and governance processes.
• Leadership & Communication: Ability to communicate architectural risk, trade-offs, and outcomes to both technical and non-technical stakeholders, including executive leadership.

What will you get in return

• Opportunity to lead and shape the enterprise security architecture function within a global organisation.
• Exposure to large-scale transformation programmes and modern technology platforms.
• Collaboration with senior security, architecture, and technology leaders across Apex.
• A strong focus on leadership development and team growth.
• A chance to make a measurable impact on the organization’s security posture and long-term resilience.

Additional information

We are an equal opportunity employer and ensure that no applicant is subject to less favourable treatment on the grounds of gender, gender identity, marital status, race, colour, nationality, ethnicity, age, sexual orientation, socio-economic, responsibilities for dependents, physical or mental disability. Any hiring decisions are made based on skills, qualifications and experiences. We measure our success as a business, not only by delivering great products and services and continually increasing our assets under administration and market share, but also by how we positively impact people, society and the planet. For more information on our commitment to Corporate Social Responsibility (CSR) please visit https://theapexgroup.com/csr-policy/.

About Apex Group

Apex Group is dedicated to driving positive change in financial services while fuelling the growth and ambitions of asset managers, allocators, financial institutions, and family offices. Established in Bermuda in 2003, the Group has continually disrupted the asset serving industry through our investment in innovation and talent. Today, we set the pace in asset servicing and stand out for our unique single-source solution and unified cross asset-class platform which supports the entire value chain, harnesses leading innovative technology, and benefits from cross-jurisdictional expertise delivered by a long-standing management team and over 13,000 highly integrated professionals. We're a people-powered business, and our people are full of ambition.

Together, we're inspired to lead the new era of data and tech enabled service. Bringing new products and services to market. Sharpening our client focus. Disrupting the market to exceed expectations. Innovating across a range of specialisms. With our focus on making a difference to our people, our planet and our society, you'll experience more here than you would at most other companies. Prepare to accelerate. We're a people-powered business with a vision to inspire a new era of service-led FinTech. We're expanding globally and offering more to our clients. This means you get more opportunities to grow with us. So prepare to accelerate. We'll make sure the time and effort you put in takes you further, faster. Positive change starts with you.

We're a people-powered business with a vision to inspire a new era of service-led FinTech. We're expanding globally and offering more to our clients. This means you get more opportunities to grow with us. So prepare to accelerate. We'll make sure the time and effort you put in takes you further, faster. The journey is yours to own. When you stretch yourself, you grow. We want you to explore ways of working that will see you thrive as part of something bigger. We'll help you with a solid structure, challenging projects, vibrant networks, supportive colleagues and approachable leaders. All the things you need to own your unique journey. Find out more about us