Security Architectures

InfyStrat; Johannesburg; On-site; ZAR 300,000 - 400,000; Full time

Job summary

A security solutions company is seeking a Head of Security Architecture in Johannesburg. This role involves designing and implementing security architectures to protect sensitive data, guiding security teams, and ensuring compliance with industry regulations like POPIA and GDPR. Ideal candidates will have considerable experience in security architecture and relevant certifications. Competitive compensation and a dynamic work environment await the right individual.

Qualifications

• Minimum of 5-10 years of experience in Security Architecture.
• CISSP, CISA, CISM, or other relevant security-related designations preferred.
• Experience designing security architectures to mitigate threats.

Responsibilities

• Design and develop complex security architectures for systems and infrastructure.
• Collaborate with stakeholders to integrate security requirements.
• Lead incident response activities in coordination with the incident response team.

Skills

Security architecture design

Cloud security

Risk assessment

IAM technologies

Incident response

Education

Tertiary qualification in Computer Science, Engineering

Tools

AWS

Azure

SIEM

Job description

Overview

Contract duration: Start with 6 months

Location: JHB

Pay rate: Negotiable

Security Architectures

The Head of Security Architecture for the organization is responsible for designing, implementing, and maintaining robust security architectures that protect sensitive data in compliance with regulations such as POPIA, GDPR. This role is critical in safeguarding the confidentiality, integrity, and availability of electronic health records (EHR), patient and employee information, medical devices, and cloud-based healthcare services. The role will focus on designing and developing security architecture that aligns business and corporate security strategy. The role will collaboratively direct Security Architects, IT, and Engineers to design and build security controls and solutions compliant with approved enterprise architecture frameworks and standards across business and digital.

Key Responsibilities

• Design and develop complex and comprehensive security architectures for our systems, applications, and infrastructure, considering both current and future needs.
• Collaborates with stakeholders, including developers, engineers, and project managers, to integrate security requirements into the system design and development lifecycle.
• Provide guidance and expertise in secure coding practices, network security, identity and access management, data protection, and other security domains.
• Model threats and risks designing the controls necessary to mitigate them, on both an organizational and technical level – thinking like an attacker, understanding and anticipating the moves and tactics that a hacker might use to attack systems.
• Follow the architecture analysis process, which consists of research, validation and evaluation of all new initiatives, with phase gates reviews presented to all stakeholders during key forums including current trends such as AI and LLMS.
• Evaluate and select security technologies, tools, and frameworks to support the organisation’s security.
• Define portfolio vision and reusable security patterns aligned with the EA strategy.
• Lead architecture reviews for high-risk projects, driving recommendations to resolution.
• Advise on security controls for hybrid and cloud platforms, balancing usability, cost, and compliance.
• Define and apply security policies, standards, and procedures to ensure compliance with industry regulations and best practices.
• Lead incident response activities, including identification, containment, eradication, and recovery, in coordination with the incident response team.
• Experience with Cloud Security platform vendors and technologies such as Azure, and AWS.
• Manage security architects and mentor engineers, developers and vendors.

Requirements / Skills and Competence

• Tertiary qualification in Computer Science, Engineering, or related field (preferred)
• Minimum of 5-10 years of experience in Security Architecture.
• CISSP, CISA, CISM, or other relevant security-related designation(s) preferred.
• Certifications in CISSP-ISSAP, TOGAF, or SABSA, cloud architecture (Microsoft, AWS, GCP)
• Experience in identifying gaps in existing architectures.
• Understanding of security infrastructure in Public and Private Cloud, e.g., virtual network infrastructure, hybrid IaaS/PaaS/SaaS solutions.
• Experience in designing security architectures to mitigate threats and sound knowledge of security strategies and technologies.
• Direct the Project and Security teams with the guidance to build policies, standards, risks, and controls frameworks supporting operational requirements for the business.
• Good experience in security architecture design in Cloud and on-prem.
• Design and implementation of IOT, endpoint protection, and secure IAM.
• Understanding of authentication and authorisation technologies (SAML, LDAP, PKI, etc.) and other IAM technologies
• Understanding of the implementation, operation, and maintenance of SIEM, boundary protection technologies (firewalls, mail gateways), Antivirus, and AD security products
• Knowledge of web application architectures and threat modelling.