Senior Cybersecurity Architect - Finance & Cloud Security

The Skills Mine

Rosebank

On-site

ZAR 1,200,000 - 1,800,000

Full time

14 days+

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

The Skills Mine seeks a seasoned Senior Security Architect to define and drive the Group’s security architecture vision across cloud and hybrid environments in Rosebank. You will translate regulatory and business needs into robust security controls and roadmaps, while mentoring teams and ensuring secure-by-default configurations across platforms.

Lead threat modelling, security reviews for major initiatives, and alignment with PCI DSS, ISO/IEC 27001, and NIST standards.

Qualifications

Bachelor's degree in IT, Cybersecurity, Computer Science, Engineering, or related field; postgraduate qualification advantageous.
7–15 years of Cybersecurity experience, incl. 5+ years in Senior/Lead/Enterprise Security Architecture roles.
Experience in regulated Financial Services, Banking or Fintech environments across multiple entities or jurisdictions.
End-to-end Security Architecture across Cloud, Applications, APIs, data, identity and Integrations.
Experience developing target-state architectures, reference patterns, threat models, security requirements and roadmaps.
Leading design assurance, risk treatment, and security decisions across major programmes and third parties.
Strong knowledge of Financial-Sector Cybersecurity, technology risk, privacy, resilience, outsourcing, PCI DSS, ISO/IEC 27001, NIST, CIS and OWASP.

Responsibilities

Define and maintain the Group Security Architecture vision, principles, target states and multi-year roadmaps aligned to business strategy and cyber objectives.
Lead security architecture reviews for new products, platforms, material changes, acquisitions, integrations and strategic programmes.
Translate business, regulatory, privacy, and resilience requirements into security requirements, controls, and architecture decisions.
Perform threat modelling, abuse-case analysis, trust-boundary assessments, and attack-path analysis for material solutions.
Define secure architecture patterns and guardrails across AWS and Azure, including IAM, networking, encryption, logging, key management, and infrastructure security.
Promote Zero Trust, least privilege, segregation of duties, defence in depth, and secure-by-default configurations across technology platforms.
Define security architecture requirements for web, mobile, API, microservice, event-driven, and third-party-integrated solutions.
Embed security controls throughout the SDLC and CI/CD lifecycle, including SAST, SCA, DAST, IaC, secrets, container, and artefact security.
Define identity architecture covering workforce, privileged, service, and customer identities, including federation, MFA, Conditional Access, and lifecycle controls.
Establish security architecture requirements for data classification, encryption, tokenisation, masking, DLP, retention, logging, and secure disposal.
Assess third-party, SaaS, outsourcing, partner, and fourth-party architectures, including shared responsibility, security requirements, and exit considerations.
Advise on risk treatment, compensating controls, formal exceptions, resilience, recoverability, observability, and containment of critical services.
Contribute security architecture expertise during major incidents, forensic investigations, post-incident reviews, cyber exercises, and control-improvement initiatives.
Act as a senior security architecture advisor, coordinate architecture across multiple entities and jurisdictions, influence stakeholders, and mentor architects and security practitioners.