Requirements:

• Bachelor’s Degree in IT, Cybersecurity, Computer Science, Engineering, or a related field, with a Postgraduate Qualification advantageous.

• Minimum 7–15 years of Cybersecurity experience, including at least 5 years in Senior, Lead, or Enterprise Security Architecture roles.

• Significant experience within regulated Financial Services, Banking, or Fintech Environments, preferably across multiple entities or jurisdictions.

• Proven end-to-end Security Architecture experience across Cloud, Applications and APIs, data, identity, and Integrations.

• Proven experience developing target-state architectures, reference patterns, threat models, security requirements, and architecture roadmaps.

• Experience leading design assurance, risk treatment, and security decisions across major programmes and third parties.

• Strong knowledge of Financial-Sector Cybersecurity, technology risk, privacy, resilience, outsourcing requirements, PCI DSS, ISO/IEC 27001, NIST, CIS, and OWASP.

Responsibilities:

• Define and maintain the Group Security Architecture vision, principles, target states and multi-year roadmaps aligned to business strategy and cyber objectives

• Lead security architecture reviews for new products, platforms, material changes, acquisitions, integrations, and strategic programmes.

• Translate business, regulatory, privacy, and resilience requirements into security requirements, controls, and architecture decisions.

• Perform threat modelling, abuse-case analysis, trust-boundary assessments, and attack-path analysis for material solutions.

• Define secure architecture patterns and guardrails across AWS and Azure, including IAM, networking, encryption, logging, key management, and infrastructure security.

• Promote Zero Trust, least privilege, segregation of duties, defence in depth, and secure-by-default configurations across technology platforms.

• Define security architecture requirements for web, mobile, API, microservice, event-driven, and third-party-integrated solutions.

• Embed security controls throughout the SDLC and CI/CD lifecycle, including SAST, SCA, DAST, IaC, secrets, container, and artefact security.

• Define identity architecture covering workforce, privileged, service, and customer identities, including federation, MFA, Conditional Access, and lifecycle controls.

• Establish security architecture requirements for data classification, encryption, tokenisation, masking, DLP, retention, logging, and secure disposal.

• Assess third-party, SaaS, outsourcing, partner, and fourth-party architectures, including shared responsibility, security requirements, and exit considerations.

• Advise on risk treatment, compensating controls, formal exceptions, resilience, recoverability, observability, and containment of critical services.

• Contribute security architecture expertise during major incidents, forensic investigations, post-incident reviews, cyber exercises, and control-improvement initiatives.

• Act as a senior security architecture advisor, coordinate architecture across multiple entities and jurisdictions, influence stakeholders, and mentor architects and security practitioners.