Senior Cybersecurity Architect: Cloud, Data & Identity

The Skills Mine; Gauteng; On-site; ZAR 1,100,000 - 1,700,000; Full time

Job summary

The Skills Mine is seeking a Senior Security Architect to define and guide the Group Security Architecture vision across multiple entities in Gauteng. You will shape target-state architectures, lead architecture reviews, and drive security requirements for cloud, API, data and identity across complex programs.

Candidate experience in regulated financial services, threat modelling, risk treatment and secure SDLC practices is essential to succeed in this role.

Qualifications

• Bachelor's degree in IT, Cybersecurity, CS, Engineering or related field; postgraduate preferred.
• 7–15 years of cybersecurity experience, incl. 5+ years in senior/lead/enterprise security architecture.
• Experience in regulated financial services, banking or fintech across entities/jurisdictions.
• End-to-end security architecture across cloud, apps & APIs, data, identity & integrations.
• Experience developing target-state architectures, reference patterns, threat models & roadmaps.
• Leading design assurance, risk treatment & security decisions across major programmes & third parties.
• Strong knowledge of financial cybersecurity, risk, privacy, resilience, PCI DSS, ISO/IEC 27001, NIST, CIS, OWASP.

Responsibilities

• Define and maintain the Group Security Architecture vision, principles, target states and roadmaps.
• Lead security architecture reviews for products, platforms, changes, acquisitions & integrations.
• Translate business, regulatory, privacy & resilience requirements into security requirements and architecture.
• Perform threat modelling, abuse-case analysis, trust-boundary assessments & attack-path analysis.
• Define secure architecture patterns across AWS and Azure including IAM, networking, encryption, logging, KMS.
• Promote Zero Trust, least privilege, segregation of duties, defence in depth & secure-by-default configurations.
• Define security requirements for web, mobile, API, microservice, event-driven & third-party integrations.
• Embed security controls throughout SDLC & CI/CD (SAST, SCA, DAST, IaC, secrets, container, artefact security).
• Define identity architecture for workforce, privileged, service & customer identities (federation, MFA).
• Establish data classification, encryption, tokenisation, masking, DLP, retention & secure disposal.
• Assess third-party, SaaS, outsourcing, partner & fourth-party architectures with shared responsibility & exit terms.
• Advise on risk treatment, compensating controls, resilience, observability & containment of critical services.
• Contribute security expertise during major incidents, investigations, exercises & control improvements.
• Act as senior advisor, coordinate architecture across entities and jurisdictions, mentor architects.

Skills

Security Architecture

Threat Modelling

Cloud & API Security

Regulated Financial Services

SDLC / DevSecOps

Identity & Access Management

Zero Trust

Education

Bachelor's degree in IT / Cybersecurity / CS / Engineering

Job description

The Skills Mine is seeking a Senior Security Architect to define and guide the Group Security Architecture vision across multiple entities in Gauteng. You will shape target-state architectures, lead architecture reviews, and drive security requirements for cloud, API, data and identity across complex programs.

Candidate experience in regulated financial services, threat modelling, risk treatment and secure SDLC practices is essential to succeed in this role.