Security Architect

About the role

The Security Architect applies the organisation's Secure by Design framework to IT projects from initiation through go‑live, ensuring security controls are correctly implemented and verified.

Key responsibilities

• Act as the security point of contact for lower‑ and medium‑risk projects, drafting security requirements, reviewing high‑level and low‑level designs, and supporting threat modelling.
• Perform assurance checks before go‑live using walkthroughs, read‑only access, or configuration evidence, focusing on SSO, MFA, role‑based access, encryption, logging and backup settings.
• Coordinate with Privacy, SOC, Vulnerability Management and Cyber Assurance teams to gather requirements, request scans, and arrange penetration testing.
• Run risk assessments, draft risk register entries and track treatment actions.
• Contribute to the security practice by using and improving templates, patterns and controls matrix.

Required profile

• Bachelor's degree in Computer Science, Information Security, Engineering or related field.
• 3–5 years of experience in information security, security engineering, GRC or security architecture.
• Working knowledge of NCA ECC, CCC and PDPL.
• Hands‑on experience with cloud or SaaS platforms and Microsoft Entra ID.

Required skills

• Identity and access management: SSO, MFA, role‑based and privileged access.
• Microsoft Entra ID and Microsoft Sentinel.
• Cloud and SaaS security configuration.
• Vulnerability scanning tools: SAST, DAST, SCA.
• Network security basics: segmentation, firewalls, WAF.
• Logging, monitoring and SIEM concepts.