Senior Application Architecture Analyst

ROLE PURPOSE

The aim is to state the overall significance of the job from the organization’s perspective. The role exists to support cybersecurity architecture and configuration assurance activities by reviewing system and solution designs, assessing security configurations, identifying architectural risks, and supporting the implementation of security-by-design principles to ensure technology solutions comply with cybersecurity requirements and standards.

Job Title:

Senior Analyst

Job Code: 555657

Grade: I2

Group:

Division:
Legal, Risk & Governance

Department:
Cybersecurity

Unit:
Application Architecture

• Security Architecture Review
• Conduct security architecture reviews for new and existing systems and solutions.
• Assess solution designs against cybersecurity requirements and standards.
• Document security observations and recommended actions.
• Secure Configuration Assessment
• Review system, infrastructure, and application configurations against approved security baselines.
• Identify configuration weaknesses and security gaps.
• Support stakeholders in implementing required configuration improvements.
• Infrastructure & Cloud Security Review
• Assess infrastructure, cloud, and network designs against security requirements and best practices.
• Support the identification of security risks associated with technology architectures.
• Document assessment results and required remediation actions.
• Architecture Risk Assessment
• Identify and assess cybersecurity risks associated with proposed architectures and technical solutions.
• Evaluate existing security controls and identify potential gaps.
• Recommend appropriate mitigation measures based on identified risks.
• Security-by-Design Enablement
• Support the incorporation of security requirements during solution design and implementation.
• Collaborate with technical teams to clarify security requirements and controls.
• Verify alignment with security-by-design principles throughout implementation activities.
• Security Assessment & Sign-off Support
• Perform assigned technical security assessments required for solution approvals.
• Maintain assessment evidence and security review documentation.
• Support security sign-off activities for systems and solutions.
• Regulatory Technical Assessment Support
• Support technical cybersecurity assessments conducted by regulatory authorities, including NCA-related assessments.
• Coordinate required technical evidence and documentation.
• Follow up on observations and remediation requirements resulting from assessments.
• Architecture Security Documentation & Improvement
• Maintain architecture security requirements, assessment records, and configuration standards.
• Monitor developments in architecture and cloud security practices.
• Contribute to improving architecture security assessment methods and controls.
• Policies, Processes & Procedures
• Follow all relevant departmental policies, processes, standard operating procedures, and instructions so that work is carried out in a controlled and consistent manner.
• Comply with all relevant safety, quality, and environmental management policies, procedures, and controls to ensure a healthy and safe work environment.
• Information Security
• Comply with all relevant information security practices and standards to ensure data integrity and confidentiality.

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Computer Engineering, or a related field.
• Professional certifications in cybersecurity, cloud security, or security architecture are considered an advantage.

• 2–4 years of experience in cybersecurity, security architecture, technical security assessments, cloud security, or related cybersecurity domains.