Principal Lead - Information Security
Description
About the Role :
We are seeking an experienced security professional to provide architecture guidance and handson support for the teams that design, build, and maintain our business applications. The role will drive securebydesign practices, maintain a reusable pattern library, and lead thorough security assessments across applications, systems, and infrastructure.
Key Responsibilities :
- Provide application security architecture support to the teams that build and maintain business systems.
- Manage and maintain a library of application security architecture patterns.
- Conduct comprehensive security architecture assessments for applications, systems, and infrastructure.
- Implement secure-by-design principles in solution architecture and development processes.
Required Skills :
- Proven experience performing security architecture assessments and implementing securebydesign solutions.
- Strong knowledge of enterprise security frameworks and methodologies (e.g., NIST, ISO27001, SABSA).
- Deep understanding of security architecture principles, patterns, and reference models.
- Handson experience with threatmodeling techniques such as STRIDE and PASTA.
- Ability to map security findings to OWASP Top10 and OWASP Application Security Verification Standard (ASVS) controls.