Head of Security Architecture & Engineering

• Accountable for all technical security capabilities, including the design, engineering, and operation of security tools, as well as the 24x7 detection and response to cyber threats.
• Accountable for Security Architecture and the integration of security into the development and IT lifecycles.
• Accountable for the engineering, reliability, and lifecycle management of all security technology platforms
• Designs the security architecture and engineers the security tooling and platforms (Secure-by-Design).
• Accountable for the 'Design' phase of the control lifecycle for technical controls - translating second line of Defence (2LOD) Control Objectives and Minimum Control Security into specific technical solutions facilitated.
• Leads the Security Architecture function, defining patterns, guardrails, and secure reference architectures and requirements
• Oversees the operational management (Control Ops) of core security tools (e.g., EDR, Network Security, Email Security, PAM, DLP operations).
• Oversees the engineering and integration of Platform/Infrastructure Security and Application Security (DevSecOps, SAST/SCA). Responsible for embedding security into the “Software Development Lifecycle (SDLC) .
• Manages the Security Data, Analytics & AI functions for data analytics for security.
• Optimises security technology solutions by establishing workflows and automation
• Responsible for the inventory of all security technologies in place and their respective status (owner, licensing, use-cases, renewals, etc.)
• Designs the security architecture and engineers the security tooling and platforms (Secure-by-Design).
• Leads the Security Architecture function, defining patterns, guardrails, and secure reference architectures and requirements
• Oversees the engineering and integration of Platform/Infrastructure Security and Application Security (DevSecOps, SAST/SCA). Responsible for embedding security into the “Software Development Lifecycle (SDLC)”
• Manages the Security Data, Analytics & AI functions for data analytics for security.
• Optimises security technology solutions by establishing workflows and automation
• Develops and maintains security patterns, guardrails, and reference architectures for key domains (Cloud, Infrastructure, Data, Application)

Personnel Specifications:

• 10+ years in security architecture, engineering, or DevSecOps
• Experience designing security solutions and reference architectures
• Hands-on experience with SIEM, EDR, NDR, SOAR platforms
• Hands-on with cloud security, application security, and infrastructure security
• Understanding of SDLC integration and security automation
• Experience with security technology selection and implementation
• Bachelor's degree in Computer Science, Cyber Security, or related field
• CISSP certification required
• GIAC certifications (GSOM, GCIA) highly advantageous
• Vendor certifications in major security platforms
• CISSP-ISSAP or SABSA certification preferred
• Cloud security certifications (AWS Security, Azure Security)
• DevSecOps or application security credential