Security Architect

Gauteng, JHB - Northern Suburbs (Negotiable)
Our client based in Isando is looking for a Security Architect with at leat 6+ years of experience in the field, coupled with NQF Level 7 qualification in Information Systems, Computer Science, Engineering, or related field and must be TOGAF Certification.

Purpose of the Role:
The Security Architect is responsible for designing and maintaining the enterprise security architecture to safeguard systems, data, and infrastructure against evolving threats. They define and enforce security frameworks, standards, and controls, ensuring compliance with enterprise policies and regulatory requirements. The role involves assessing risks, conducting threat modelling, and embedding security-by-design into applications, data, and technology platforms. Security Architect is also responsible for guiding the adoption of identity management, access controls, encryption, and monitoring solutions.

They collaborate closely with Business, Application, Data, Technology, Integration, and AI/ML Architects to ensure security is integrated across all domains. Ultimately, the Security Architect ensures the organization’s digital ecosystem is resilient, compliant, and capable of supporting innovation safely.
Qualifications and Experience

Required:

Matric plus NQF Level 7 Qualification in Information Systems, Computer Science, Engineering, or related field

TOGAF Certification

The Security Architect has 6–8 years of experience in designing and implementing enterprise security architectures across multiple industries. They have defined and maintained security frameworks, standards, and policies that align with business strategy and regulatory requirements.

Experience includes conducting risk assessments, threat modeling, and vulnerability analysis to ensure proactive defense against evolving cyber threats.

Must have successfully led the deployment of identity and access management, encryption, endpoint protection, and SIEM solutions.

Experience in guiding organizations through compliance with frameworks and regulations such as ISO 27001, NIST, POPIA, and GDPR.

Proven expertise in security-by-design practices, embedding controls within applications, data, and technology platforms.

Background includes close collaboration with Application, Data, Technology, Integration, and AI/ML Architects to ensure security is integrated across all domains.

Must be skilled in working with executives and stakeholders, providing assurance that security investments balance risk, cost, and business value.

Must have experience in leading incident response and disaster recovery planning, ensuring organizational resilience.

Must have a strong track record of enabling secure, compliant, and innovative enterprise environments through robust security architecture.

3+ years of experience in a large-scale digital transformation, where new cloud platforms, applications, and data flows need to be secured end-to-end.

Design the enterprise security architecture, embedding controls such as identity management, encryption, and monitoring into all layers of the ecosystem.

Aligning security with compliance requirements and industry best practices, they reduce risk while enabling innovation. This results in a resilient and trusted digital environment that supports business growth and transformation safely.

Role

Description:


Security Architecture Design:

Define and maintain the enterprise security blueprint covering applications, data, infrastructure, and integrations.

Risk Assessment and Thread Modelling

Identify, assess, and mitigate risks through proactive security design and controls.

Compliance and Governance

Ensure adherence to regulatory requirements (e.g., ISO 27001, NIST, POPIA, GDPR) and enterprise policies.

Identity and Access Management

Oversee authentication, authorization, and privilege management across systems.

Security by Design and Integration:

Embed security into applications, data, technology, and AI/ML initiatives from the design stage.

Incident Response and Resilience:

Support incident response, monitoring, and disaster recovery planning to ensure continuity.

Collaboration and Stakeholder Engagement:

Partner with other architects, executives, and delivery teams to align security with business value and innovation.

For more information please contact:

Koketso Malete