Lead - Security Architecture

Location
Dubai

About the Job
The Enterprise Security Architect leads and defines the organization’s overall cyber security architecture strategy. The role ensures security aligns with business goals, risk appetite, and regulatory requirements. It also embeds security into digital transformation, cloud, data, and emerging technologies.

Role Profile

• Lead and mature the Security Architecture capability across the Group, including standards, principles, reference architectures, and design governance.
• Establish and run Security Architecture Governance (architecture review board/design authority, decision logs, exception process, and compliance traceability).
• Drive adoption of security guardrails that enable teams to ship faster without repeated reinvention (pre-approved patterns, reference implementations, templates).
• Manage security architecture exceptions end-to-end: justification, compensating controls, formal risk acceptance, and time-bound remediation plans.
• Own and approve security architecture and design for major programs, platforms, and transformation initiatives.
• Embed Security by Design and DevSecOps practices into delivery lifecycles.
• Own the end-to-end application security architecture engagement across the delivery lifecycle, from early concept through to production and ongoing change.
• Provide architectural leadership for cloud security (AWS, Azure, GCP), including secure landing zones and shared responsibility models.

Requirements

• 12+ years of experience in Information Security, with significant experience in security architecture roles.
• Experience in regulated or high-risk environments (e.g., financial services, retail at scale, critical infrastructure).
• A bachelor’s or master’s degree in cyber security, computer science, engineering or technology-related field, or equivalent.
• Cloud certifications (AWS, Azure, GCP – Security specialization preferred).
• CISSP, CCSP, CREST Registered Technical Security Architect.
• SABSA, TOGAF are preferred.