Senior Security Architect - Arab Banking Corporation

Senior Security Architect – Arab Banking Corporation

Join to apply for the Senior Security Architect – Arab Banking Corporation role at Jobs via eFinancial

Careers.

The Senior Security Architect will play a key role in building and maintaining IT security solutions and controls for the Bank across new and emerging domains, including Cloud and Innovation. The role will involve developing end‑to‑end security for Bank ABC, handling any technical problems that arise, identifying IT threats and vulnerabilities, designing and building robust security architectures, and serving as the security point person for technical and business security concerns.

• Research & Planning:
  • Plan, research and design robust enterprise‑wide security architectures for any IT or business projects aligned with industry frameworks (e.g. SABSA, TOGAF, NIST, CSA, ISO 27001).
  • Develop threat use cases / scenarios to clearly depict threats to security architecture.
  • Align new security solutions with existing technologies and design integration plans.
  • Lead and coordinate assessment of existing and target/implemented architecture.
• Cost, Planning, Project Management:
  • Prepare cost estimates and identify integration issues for solutions and architectures.
  • Develop and maintain security reference architectures and roadmaps.
• Engineering:
  • Understand Security Engineering outputs and oversee their incorporation into security planning.
  • Incorporate security measures into the existing, resultant or target architecture.
  • Collaborate with Dev Ops, Cloud, and IT teams to embed security into CI/CD pipelines and infrastructure (Dev Sec Ops ).
• Designing:
  • Define and maintain technical security patterns for secure systems and applications.
  • Design high‑level and low‑level security architecture to meet business and technical requirements.
  • Design public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures.
  • Identify and reuse security solutions and consider integration with other tools when designing security solutions.
• Implementation:
  • Coordinate the installation of security solutions and manage the configuration of said solutions.
  • Identify opportunities to automate processes and activities and coordinate implementation of automation.
  • Identify gaps in architecture and address these gaps through defining security requirements based on the threat landscape / assessment.
• Testing & Assessments:
  • Coordinate the testing of security solutions.
  • Conduct threat modelling, risk assessments, and security architecture reviews.
• Training & Knowledge Share:
  • Expert knowledge in cryptography and Cloud Security solutions and ability to research and understand new solutions.
  • Expert knowledge of, and hands‑on experience in, securing AWS, Azure and GCP.
• Governance:
  • Define, implement and maintain corporate security policies and procedures.
  • Monitor issues / remediation activities to ensure gap closure to fulfil security control objectives and meet mandatory external requirements.
  • Be informed of changes to industry best practices, changes in architecture (e.g. Cloud) and work with third parties, vendors and the wider bank to design relevant security controls.
  • Coordinate with other members of Group IT, Cyber & Information Security, and end‑user departments to sustain appropriate technical and procedural controls to support the industry mandatory security objectives.
• Strategies:
  • Develop and own a security strategy and deliver end‑to‑end including planning and roadmap development.
• Incident Management:
  • Support incident response and security operations by providing architectural insights.
• Architecture Documentation:
  • Design and develop high‑level security architecture documents.
  • Develop architecture patterns to address multiple / differing use cases.
  • Develop and enhance Architecture Building Blocks (ABBs) and Solution Building Blocks (SBBs) and design architectures mapping to these building blocks.
  • Write comprehensive reports including documenting existing architecture and defining baseline and target architecture in terms of components, integration and capabilities, and aligning with business…