Head of Cyber Security Architecture

Role & responsibilities:

• Lead the Security Architecture function and manage, mentor, and allocate a team of Security Architects across strategic programmes and technology initiatives.
• Own security architecture principles, standards, reference architectures, patterns, roadmaps, and exception governance.
• Ensure architecture decisions are converted into implemented controls with clear ownership, acceptance criteria, testing evidence, operational handover, and measurable outcomes.
• Lead the architecture and implementation governance of SIEM, WAF, Privileged Identity Management (PIM), Data Loss Prevention (DLP), email security, mobile application security, and other enterprise security capabilities.
• Establish and run security architecture review forums, design assurance, threat modelling, risk acceptance, and remediation tracking.
• Lead CTEM across scoping, discovery, prioritisation, validation, mobilisation, remediation governance, and executive reporting.

Preferred candidate profile:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; a relevant master's degree is preferred.
• Minimum 12 years of progressive cybersecurity experience, including substantial responsibility in security architecture, security engineering, or enterprise security technology implementation.
• Demonstrated experience leading Security Architects or senior security engineering professionals in a complex enterprise environment.
• Proven delivery experience implementing and operationalising multiple enterprise security capabilities, including SIEM, WAF, PIM or PAM, DLP, email security, and mobile application security.
• Experience leading security architecture reviews, threat modelling, design assurance, technology selection, vendor evaluation, implementation governance, testing, and transition to operations.
• Hands-on understanding of CTEM, vulnerability management, attack-surface management, security control validation, penetration testing, and risk-based remediation governance.

Preferred Certifications

• CISSP and/or ISSAP; SABSA; TOGAF; CCSP; CISM; GIAC architecture, cloud, incident response, or penetration-testing certifications; relevant cloud security certifications from Microsoft Azure, Amazon Web Services, or Google Cloud.