Cybersecurity / Security Architect

Role Overview

Cybersecurity / Security Architect at JODAYN. This role is responsible for defining and governing enterprise security architecture to ensure that security, privacy, resilience, and regulatory requirements are embedded into business, application, data, technology, cloud, and solution architectures.

Role Purpose

Develop security principles, reference architectures, standards, controls, and target-state designs while providing architecture assurance for strategic initiatives and technology solutions in alignment with enterprise and cybersecurity strategy.

Key Responsibilities

Enterprise Security Architecture

• Develop and maintain enterprise security architecture in alignment with business strategy, enterprise architecture, cybersecurity strategy, and regulatory requirements.
• Assess current-state security architecture across applications, data, infrastructure, cloud, networks, identity, and integration environments.
• Define target-state security architecture and security transformation roadmaps.
• Develop security architecture principles, standards, patterns, reference architectures, and design guardrails.

Security-by-Design and Privacy

• Embed security-by-design and privacy-by-design requirements across enterprise and solution architecture activities.
• Support alignment with applicable national cybersecurity controls, regulatory requirements, and recognized international security standards.

Zero Trust Architecture

• Define Zero Trust architecture principles and implementation patterns across identity, devices, networks, applications, data, and workloads.

Identity and Access Management

• Define identity and access management architecture including authentication, authorization, privileged access, federation, and identity lifecycle controls.

Cloud, Hybrid, and On-Premises Security

• Define security architecture for cloud, hybrid, on-premises, SaaS, and externally hosted environments.

Network Security

• Define network security architecture including segmentation, secure connectivity, firewalls, gateways, remote access, and trust boundaries.

Application and Data Security

• Define application and API security architecture requirements across modern and legacy environments.
• Define data security architecture including encryption, key management, data classification, data protection, and secure data exchange.

Risk Assessment and Compliance

• Support threat modeling, architecture risk assessment, and identification of security gaps and mitigation measures.
• Review solution architectures and technical designs for compliance with enterprise security standards and control requirements.

Technology Evaluation and Governance

• Support security technology evaluation, vendor assessment, technical due diligence, and architecture decisions.
• Participate in architecture governance, security design reviews, and Architecture Review Boards.

Stakeholder Collaboration

• Collaborate with enterprise architects, solution architects, cloud architects, application teams, infrastructure teams, data teams, and cybersecurity operations.

Qualifications & Experience

• Minimum 8–10 years of experience in cybersecurity, information security, infrastructure security, cloud security, solution architecture, or related disciplines.
• At least 4–5 years of hands-on experience in Security Architecture or a comparable senior cybersecurity architecture role.
• Demonstrated experience designing enterprise-scale security architectures across multiple technology domains.
• Strong experience with identity, network, application, cloud, infrastructure, and data security architecture.
• Experience supporting large-scale digital transformation, cloud transformation, or cybersecurity improvement programs.
• Experience working with enterprise architecture teams, cybersecurity functions, technology teams, vendors, and senior stakeholders.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related discipline.

Skills & Competencies

• Enterprise security architecture design and governance.
• Security-by-design and privacy-by-design methodologies.
• Zero Trust Architecture principles and implementation.
• Identity and Access Management architecture.
• Cloud security architecture.
• Network and infrastructure security architecture.
• Application and API security architecture.
• Data security and information protection.
• Security controls and reference architectures.
• Threat modeling and architecture risk assessment.
• Security governance and architecture assurance.
• Cybersecurity compliance and regulatory alignment.
• Security technology evaluation and selection.
• Stakeholder management and consulting.
• Strong analytical and risk-based thinking.
• Ability to translate cybersecurity requirements into practical architecture controls and design decisions.
• Strong communication, facilitation, and stakeholder management skills.
• Ability to balance security, business value, usability, cost, and operational practicality.
• Strong attention to detail, architecture quality, and regulatory compliance.
• Consulting mindset with the ability to work across multiple stakeholders, programs, and technology domains.

Additional Information

Preferred Frameworks, Standards & Methods

• SABSA.
• TOGAF.
• ArchiMate.
• NIST Cybersecurity Framework.
• NIST security architecture and control guidance.
• ISO/IEC 27001 and ISO/IEC 27002.
• Zero Trust architecture principles.
• Cloud Security Alliance guidance.
• Applicable national cybersecurity frameworks and controls.
• Secure software development and DevSecOps practices.

Preferred Tools & Technology Exposure

• Enterprise architecture tools such as Bizzdesign, Sparx Enterprise Architect, Orbus/iServer, ARIS, or similar platforms.
• Identity and access management, privileged access management, and federation technologies.
• SIEM, SOAR, endpoint security, network security, and cloud security technologies.
• Encryption, key management, certificate management, and data protection technologies.
• Cloud security services across Microsoft Azure, AWS, Google Cloud, or equivalent platforms.
• Security architecture, threat modeling, vulnerability management, and risk assessment tools.

Preferred Certifications

• SABSA certification is highly desirable.
• CISSP, CCSP, CISM, or equivalent security certification is highly desirable.
• TOGAF certification is desirable.
• Relevant cloud security, identity, network security, or security architecture certifications are advantageous.