Security Architect Manager

Develop secure design principles and frameworks tailored to the bank s IT and business environment. Incorporate security best practices into the design of systems, applications, and network infrastructure. Ensure designs address confidentiality, integrity, availability, and regulatory compliance requirements. Collaborate with business and IT teams to embed security early in project lifecycles. Continuously update design standards to reflect emerging threats and technological advancements. Conduct thorough security reviews of proposed and existing IT architectures within the Bank. Identify potential security gaps, vulnerabilities, and risks in architectural designs. Provide recommendations to enhance security posture while maintaining business agility. Ensure architectural compliance with internal policies, industry standards, and regulatory mandates. Work closely with project teams to ensure security requirements are understood and implemented. Document and communicate security requirements to all relevant stakeholders. Update and refine requirements based on evolving threat landscapes and compliance changes. Validate that security solutions meet defined requirements and design specifications before deployment. Scope security testing, including penetration testing and vulnerability assessments, on new solutions. Ensure integration of security controls does not adversely affect system performance or user experience. Collaborate with quality assurance and operations teams to monitor solution effectiveness post-deployment. Drive continuous improvement by incorporating feedback and lessons learned into future architecture.

Desired Candidate Profile

A bachelor s degree in Cybersecurity, Information Systems, Computer Science, Computer Engineering, or a related field from a reputable university. 6+ years of relevant experience in the financial sector, in security architecture governance, including participation in Architecture Review Boards (ARBs). Strong working knowledge of cybersecurity frameworks and standards (CBE Cybersecurity Framework, NIST Cybersecurity Framework, ISO 27001, PCI-DSS, etc). Maintaining at least one active certificate of Information/Cybersecurity such as CISSP, CISM, or TOGAF.