Information Security Domain Architect

Setting the Scene
Our client is a large Queensland Government organisation undertaking a significant, multi-year cyber security transformation program, designed to strengthen its security posture, modernise existing technologies and reduce organisational risk. With a broad and complex technology environment, the organisation is investing in several key security initiatives spanning Secure Access Service Edge (SASE), Data Loss Prevention (DLP), Application Control and Privileged Access Management (PAM). As part of this investment, they are seeking an experienced Information Security Domain Architect to provide strategic and technical architecture expertise across the program, helping shape future-state security capabilities and ensure the successful delivery of enterprise-wide security improvements.

The Role
As an Information Security Domain Architect, you'll play a pivotal role in defining, designing and establishing secure architecture solutions across a major cyber security transformation program. Working closely with the Project Manager, Program Manager, Enterprise Architects, Solution Architects and technical specialists, you'll assess existing security environments, identify gaps and develop future-state architecture designs aligned with organisational security objectives and industry best practice.

Key Responsibilities

• Develop and maintain comprehensive information security architecture aligned with organisational objectives, security standards and enterprise architecture principles.
• Assess and document existing security environments, technologies, policies and processes to establish current-state (As-Is) architecture.
• Define future-state (To-Be) security architectures, frameworks, roadmaps and architectural standards.
• Provide architectural leadership across major cyber security initiatives, including SASE, Data Loss Prevention (DLP), Application Control and Privileged Access Management (PAM).
• Work closely with Enterprise Architects and Solution Architects to develop logical and physical solution architecture designs.
• Translate business requirements into technical architecture outcomes, ensuring solutions balance security, functionality and operational requirements.
• Undertake security gap analysis, identify critical path dependencies and recommend appropriate remediation activities.
• Conduct market research and evaluate security products, technologies and tooling to support solution selection and implementation.
• Develop detailed option analyses, business cases, concepts of operation and solution recommendations.
• Identify, assess and provide recommendations for the treatment of information security risks.
• Align security architecture initiatives with recognised frameworks and standards, including NIST Cybersecurity Framework (CSF) 2.0.
• Collaborate with technical specialists, vendors and business stakeholders to establish architectural requirements and design solutions.
• Develop and maintain architecture documentation, including requirements, use cases, user stories, design artefacts and technical specifications.
• Contribute to security policies, processes, configuration decisions, reporting dashboards and BAU operating models.
• Support the development of transition plans and decommissioning strategies for legacy systems and technologies.
• Provide architectural guidance and oversight to Solution Architects across the broader cyber security program.
• Mentor and support developing architects, contributing to capability uplift and knowledge sharing across the security function.
• Work closely with project and program leadership to support governance, project deliverables and successful program outcomes.

What You'll Bring

• Extensive experience in an Information Security Architect, Cyber Security Architect, Security Domain Architect or Senior Solution Architect position.
• Demonstrated experience designing and delivering enterprise security architectures across complex technology environments.
• Strong experience contributing to or leading large-scale cyber security transformation and uplift programs.
• Proven ability to assess existing environments and develop future-state security architecture designs and roadmaps.
• Strong understanding of enterprise security architecture principles, frameworks, standards and governance.
• Experience across several of the following security domains:
  
  • Secure Access Service Edge (SASE) and Zero Trust Architecture.
  • Data Loss Prevention (DLP).
  • Privileged Access Management (PAM).
  • Identity and Access Management (IAM).
  • Endpoint security and Application Control.
  • Network security and enterprise access management.
• Demonstrated experience developing High-Level and Low-Level Architecture Designs, including logical and physical solution architecture.
• Strong knowledge of security frameworks and standards, particularly NIST CSF, ISO 27001 and relevant information security controls.
• Experience conducting security assessments, gap analysis, risk assessments and remediation planning.
• Proven ability to evaluate security products and technologies, undertake option analysis and provide architectural recommendations.
• Strong stakeholder engagement skills, with the ability to translate complex business requirements into practical technical solutions.
• Experience working alongside Enterprise Architects, Solution Architects, project managers and technical SMEs.
• Excellent documentation and communication skills, with experience producing architecture artefacts, business cases, technical requirements and solution designs.
• Demonstrated ability to provide technical leadership, mentor other architects and influence architectural decisions across complex programs.
• Experience working within government or other large, highly regulated enterprise environments will be highly regarded.
• A relevant tertiary qualification or equivalent extensive professional experience in ICT, solution architecture or information security.

What's in It for You?

• Initial 12-month contract with a strong likelihood of extension.
• Opportunity to play a key architectural role in a significant, multi-year cyber security transformation program.
• Exposure to multiple enterprise security initiatives across SASE, DLP, PAM and endpoint security.
• Work alongside senior technology leaders, Enterprise Architects and experienced cyber security specialists.
• Genuine opportunity to influence future-state security architecture, standards and strategic technology decisions.
• Brisbane-based opportunity with flexible hybrid working arrangements.
• The opportunity to contribute to a high-profile security uplift program with tangible organisational impact.

How to Apply
Applications are treated with absolute confidentiality. Click APPLY or contact Clodagh at clodagh@decipherbureau.com for an informal conversation about this opportunity. Equal opportunity and diversity are valued and encouraged.