SABSA Enterprise Security Architect

Summary: The SABSA Enterprise Security Architect is responsible for developing and evolving the enterprise security architecture, ensuring alignment with business strategy and technology initiatives. This role involves translating business requirements into scalable security solutions, providing expert advice on emerging technologies, and leading the implementation of security frameworks. The architect will also conduct risk assessments, evaluate security technologies, and mentor security teams while communicating complex concepts to various stakeholders.

Key Responsibilities:

• Develop, maintain, and evolve the enterprise security architecture roadmap, frameworks, and standards.
• Translate business requirements and risk assessments into robust and scalable security solutions.
• Collaborate with senior leadership and key stakeholders to align security architecture with overall business strategy and technology initiatives.
• Provide expert advice on emerging security technologies and threats.
• Design and review security architectures for new and existing systems, applications, and infrastructure components.
• Ensure solutions are secure by design and comply with internal and external security policies.
• Lead the development and implementation of security architecture frameworks, principles, patterns, and guidelines.
• Conduct comprehensive threat modelling and risk assessments to identify potential vulnerabilities and recommend appropriate security controls.
• Evaluate and recommend security technologies and solutions, performing proof-of-concept exercises as needed.
• Contribute to the development and enforcement of security policies, standards, and procedures across the enterprise.
• Provide technical leadership, guidance, and mentorship to security engineers and other technical teams.
• Effectively communicate complex security concepts to technical and non-technical stakeholders, including senior management.

Key Skills:

• SABSA Certification is essential.
• 10+ years of progressive experience in information security, with at least 5 years in an enterprise security architecture role.
• Proven experience in designing and implementing complex security architectures across diverse technology stacks (on-premise, cloud – AWS, Azure, GCP, SaaS).
• Deep understanding of security frameworks and standards such as NIST, ISO 27001, CIS Controls.
• Strong knowledge of various security domains including network security, application security, data security, identity and access management (IAM), cloud security, and incident response.
• Experience with security architecture tools and methodologies.
• Excellent analytical, problem-solving, and decision-making skills.
• Strong communication, presentation, and interpersonal skills, with the ability to influence and collaborate effectively with all levels of the organisation.
• Ability to work independently and as part of a team in a fast-paced environment.

Salary (Rate): undetermined

City: Andover

Country: United Kingdom

Working Arrangements: undetermined

IR35 Status: undetermined

Seniority Level: undetermined

Industry: IT