Security Architect (Cybersecurity)

Project Description:

We are looking for an experienced Security Architect to join a strategic Cyber Security project.

In this role, you will provide security architecture expertise, governance support, and security assessments across a wide range of technology solutions. You will work closely with business and technical stakeholders to identify security risks, recommend appropriate controls, and ensure compliance with security standards and best practices.

Required Qualifications:

• Strong commercial experience in Cyber Security and Security Architecture.

• Hands-on experience performing security architecture assessments and reviews.

• Experience with Cloud Security Assessments and security risk analysis.

• Strong understanding of:

  • Identity & Access Management (IAM)

  • Network Security

  • Network Segmentation

  • Authentication and Authorization

  • Encryption and Data Protection

  • Security Logging and Monitoring

• Knowledge of security standards, frameworks, controls, and governance principles.

• Experience assessing connectivity and infrastructure security requirements, including firewall, proxy, and internet access use cases.

• Ability to translate technical security findings into business-focused recommendations.

• Strong analytical, problem-solving, and documentation skills.

• Experience working with cross-functional technical and business teams.

Nice to Have:

• German language proficiency.

• Experience working in international and multinational environments.

• Security certifications such as CISSP, CCSP, SABSA, TOGAF, Azure Security Engineer, AWS Security Specialty, or equivalent.

• Experienced in using AI tools in day-to-day workflow

Main Responsibilities:

• Review solution concepts, architectures, and technical documentation to identify applicable security standards, security risks, and required controls.

• Conduct Security Architecture Reviews, Cloud Security Assessments, and Vendor Security Assessments.

• Evaluate solutions from a security perspective across:

  • Identity & Access Management (IAM)

  • Network architecture and segmentation

  • Authentication and authorization mechanisms

  • Encryption and data protection

  • Logging and monitoring

  • Security controls and risk management

• Assess firewall, proxy, server internet access, and connectivity-related requests, considering business requirements, communication flows, security controls, monitoring, and data processing implications.

• Provide clear and actionable security recommendations to both technical and non-technical stakeholders.

• Prepare architecture review reports and security assessment documentation.

• Support security governance activities by advising on security standards, policies, and best practices.

• Collaborate with project teams to implement and improve secure architecture patterns.

• Contribute to the continuous improvement of security review methodologies, assessment frameworks, and documentation standards.

Originally posted on Himalayas