Senior Cybersecurity Architect

The Skills Mine; Gauteng; Presencial; ZAR 1.100.000 - 1.700.000; Jornada completa

Descripción de la vacante

The Skills Mine is seeking a Senior Security Architect to define and guide the Group Security Architecture vision across multiple entities in Gauteng. You will shape target-state architectures, lead architecture reviews, and drive security requirements for cloud, API, data and identity across complex programs.

Candidate experience in regulated financial services, threat modelling, risk treatment and secure SDLC practices is essential to succeed in this role.

Formación

• Bachelor's degree in IT, Cybersecurity, CS, Engineering or related field; postgraduate preferred.
• 7–15 years of cybersecurity experience, incl. 5+ years in senior/lead/enterprise security architecture.
• Experience in regulated financial services, banking or fintech across entities/jurisdictions.
• End-to-end security architecture across cloud, apps & APIs, data, identity & integrations.
• Experience developing target-state architectures, reference patterns, threat models & roadmaps.
• Leading design assurance, risk treatment & security decisions across major programmes & third parties.
• Strong knowledge of financial cybersecurity, risk, privacy, resilience, PCI DSS, ISO/IEC 27001, NIST, CIS, OWASP.

Responsabilidades

• Define and maintain the Group Security Architecture vision, principles, target states and roadmaps.
• Lead security architecture reviews for products, platforms, changes, acquisitions & integrations.
• Translate business, regulatory, privacy & resilience requirements into security requirements and architecture.
• Perform threat modelling, abuse-case analysis, trust-boundary assessments & attack-path analysis.
• Define secure architecture patterns across AWS and Azure including IAM, networking, encryption, logging, KMS.
• Promote Zero Trust, least privilege, segregation of duties, defence in depth & secure-by-default configurations.
• Define security requirements for web, mobile, API, microservice, event-driven & third-party integrations.
• Embed security controls throughout SDLC & CI/CD (SAST, SCA, DAST, IaC, secrets, container, artefact security).
• Define identity architecture for workforce, privileged, service & customer identities (federation, MFA).
• Establish data classification, encryption, tokenisation, masking, DLP, retention & secure disposal.
• Assess third-party, SaaS, outsourcing, partner & fourth-party architectures with shared responsibility & exit terms.
• Advise on risk treatment, compensating controls, resilience, observability & containment of critical services.
• Contribute security expertise during major incidents, investigations, exercises & control improvements.
• Act as senior advisor, coordinate architecture across entities and jurisdictions, mentor architects.

Conocimientos

Security Architecture

Threat Modelling

Cloud & API Security

Regulated Financial Services

SDLC / DevSecOps

Identity & Access Management

Zero Trust

Educación

Bachelor's degree in IT / Cybersecurity / CS / Engineering

Descripción del empleo

Requirements:

• Bachelor's Degree in IT, Cybersecurity, Computer Science, Engineering, or a related field, with a Postgraduate Qualification advantageous.

• Minimum 7-15 years of Cybersecurity experience, including at least 5 years in Senior, Lead, or Enterprise Security Architecture roles.

• Significant experience within regulated Financial Services, Banking, or Fintech Environments, preferably across multiple entities or jurisdictions.

• Proven end-to-end Security Architecture experience across Cloud, Applications and APIs, data, identity, and Integrations.

• Proven experience developing target-state architectures, reference patterns, threat models, security requirements, and architecture roadmaps.

• Experience leading design assurance, risk treatment, and security decisions across major programmes and third parties.

• Strong knowledge of Financial-Sector Cybersecurity, technology risk, privacy, resilience, outsourcing requirements, PCI DSS, ISO/IEC 27001, NIST, CIS, and OWASP.

Responsibilities:

• Define and maintain the Group Security Architecture vision, principles, target states and multi-year roadmaps aligned to business strategy and cyber objectives

• Lead security architecture reviews for new products, platforms, material changes, acquisitions, integrations, and strategic programmes.

• Translate business, regulatory, privacy, and resilience requirements into security requirements, controls, and architecture decisions.

• Perform threat modelling, abuse-case analysis, trust-boundary assessments, and attack-path analysis for material solutions.

• Define secure architecture patterns and guardrails across AWS and Azure, including IAM, networking, encryption, logging, key management, and infrastructure security.

• Promote Zero Trust, least privilege, segregation of duties, defence in depth, and secure-by-default configurations across technology platforms.

• Define security architecture requirements for web, mobile, API, microservice, event-driven, and third-party-integrated solutions.

• Embed security controls throughout the SDLC and CI/CD lifecycle, including SAST, SCA, DAST, IaC, secrets, container, and artefact security.

• Define identity architecture covering workforce, privileged, service, and customer identities, including federation, MFA, Conditional Access, and lifecycle controls.

• Establish security architecture requirements for data classification, encryption, tokenisation, masking, DLP, retention, logging, and secure disposal.

• Assess third-party, SaaS, outsourcing, partner, and fourth-party architectures, including shared responsibility, security requirements, and exit considerations.

• Advise on risk treatment, compensating controls, formal exceptions, resilience, recoverability, observability, and containment of critical services.

• Contribute security architecture expertise during major incidents, forensic investigations, post-incident reviews, cyber exercises, and control-improvement initiatives.

• Act as a senior security architecture advisor, coordinate architecture across multiple entities and jurisdictions, influence stakeholders, and mentor architects and security practitioners.