Security Architect | Technology

Lesaka Technologies Inc.; Johannesburg; On-site; ZAR 1,200,000 - 2,200,000; Full time

Job summary

Lesaka Merchant is seeking a SECURITY ARCHITECT to design and govern enterprise security architecture across cloud, infrastructure, applications and data environments. You will define and maintain architecture standards and embed security into solution design.

The role requires 7+ years in cyber security, with experience in governance, risk management, cloud security and IAM/PAM design. You will lead threat modelling, vulnerability management, and alignment with PCI-DSS/SOX ITGC controls.

Qualifications

• Bachelor’s degree or equivalent in IT/Information Security.
• 7+ years in Cyber Security or Enterprise Security.
• Experience in security architecture, governance and risk management.
• Cloud security architecture experience (AWS/Azure/GCP).
• IAM/PAM design and governance experience.
• Knowledge of PCI-DSS and SOX ITGC requirements.

Responsibilities

• Define and govern enterprise security architecture across cloud, infra, applications and data environments.
• Embed security requirements into solution design processes.
• Conduct threat modelling and risk assessments for new initiatives.
• Define security policies across cloud, network, and applications.
• Align architecture with regulatory frameworks (PCI, SOX, POPIA).
• Define detection architecture (SIEM, EDR, XDR integration) and incident playbooks.
• Review incident trends and recommend improvements.
• Define vulnerability management standards and IAM/PAM frameworks.

Skills

Security architecture

Risk management

Cloud security architecture

IAM/PAM design

Threat modelling

Security governance

PCI-DSS compliance

SOX ITGC

Regulatory alignment

Education

Bachelor’s degree in IT/Information Security

Job description

We’re Hiring: SECURITY ARCHITECT | Information Technology

Are you an experienced security architecture professional with a passion for designing secure, scalable enterprise solutions?

Job Description

Lesaka Merchant is looking for a SECURITY ARCHITECT to join our Merchants Operations Division. This role is ideal for a strategic and technically strong individual who can define and govern enterprise security architecture across cloud, infrastructure, application and data environments.

Job purpose

To design and govern the enterprise security architecture, ensuring that all technology solutions are secure by design and aligned to risk, regulatory requirements, and industry best practice. The role acts as the design authority for security controls across cloud, infrastructure, applications, and data environments.

Key Responsibility Areas

Security Strategy, Architecture & Risk Posture

• Define and maintain enterprise security architecture and standards
• Embed security requirements into solution design processes
• Conduct threat modelling and risk assessments for new initiatives
• Define security policies across cloud, network, and applications
• Align architecture with regulatory frameworks (PCI, SOX, POPIA)

Threat Detection & Security Operations (Design Authority)

• Define detection architecture (SIEM, EDR, XDR integration)
• Design event classification and escalation frameworks
• Ensure observability and threat intelligence integration
• Define incident response playbooks and standards
• Review incident trends and recommend improvements

Vulnerability, Identity & Access Governance

• Define vulnerability management standards and prioritisation
• Design IAM and PAM frameworks (RBAC, least privilege)
• Define endpoint, data protection, and DLP standards
• Establish third-party security requirements
• Align IAM design with Infrastructure execution

Security Compliance & Assurance

• Define security control frameworks and audit requirements
• Map controls to PCI-DSS and SOX ITGC requirements
• Ensure design supports auditability and evidence collection
• Review control effectiveness and recommend improvements
• Maintain security standards and documentation

Stakeholder & Risk Alignment

• Act as security design advisor to Architecture and IT teams
• Translate business risk into security architecture decisions
• Collaborate with Cloud, Infrastructure, and Application teams
• Communicate security risks and design trade-offs
• Support prioritisation of security initiatives

Qualifications & Experience

• Bachelor’s degree in IT, Information Security, Cyber Security or equivalent
• 7+ years’ experience in Cyber Security, Security Architecture, Risk, or Enterprise Technology environments
• Minimum 5 years’ experience in:
• Security architecture and secure solution design
• Enterprise security governance and risk management
• Cloud security architecture (AWS, Azure, or GCP)
• IAM/PAM design and governance
• Security operations and threat detection frameworks
• PCI-DSS, SOX ITGC, and regulatory compliance environments
• Vulnerability management and security assurance

Preferred Security Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• SABSA Chartered Security Architect certification advantageous

Key Competencies

• Analysing & Forming Opinions, Strategic Insight
• Persuasiveness & Presenting
• Organisational Sensitivity
• Innovation & Conceptual Thinking
• Integrity & Accountability
• Security Architecture Frameworks (SABSA, TOGAF, NIST CSF)
• Cloud Security Architecture (AWS/Azure/GCP)
• Application & API Security Design
• Identity & Access Architecture (IAM/PAM)
• Network & Infrastructure Security Design
• DevSecOps & Secure SDLC
• PCI-DSS & SOX ITGC Control Design

Ready to shape enterprise security architecture at Lesaka Merchant?