Senior Security Architect (Consultant)

The Senior Security Architect, reporting to the Cluster Head of Application Security Architecture, is responsible for leading the governance of application architecture security. This role includes conducting threat modeling, security gap assessments, and overseeing IT security reviews to ensure applications adhere to established security standards. The Senior Security Architect works closely with development teams to integrate security into the software development lifecycle and supports the approval process for go-lives, ensuring that security requirements are fully met.

Key Responsibilities :

• Lead the design of cybersecurity strategies for systems and networks with multilevel security requirements.
• Ensure acquired or developed systems and architectures align with the organization’s cybersecurity architecture guidelines.
• Conduct security reviews, identify gaps in security architecture, and develop security risk management plans.
• Provide input on security requirements to be included in procurement documents such as statements of work.
• Contribute to the Risk Management Framework (RMF) activities and related documentation.
• Define and document the security impact of new systems or interfaces on the current environment’s security posture.
• Evaluate security architectures and designs to ensure their adequacy.
• Analyze user needs and requirements to plan security architectures effectively.
• Determine and document the security controls required for information systems and networks.
• Manage improvements to the application security framework.
• Implement tools and strategies to ensure the successful execution of the Application Security Program.
• Collaborate effectively with business lines and clients to address complex information security issues.
• Review documentation created by team members and peers, providing constructive feedback.
• Prepare and review activity reports as requested by management.
• Develop services to address various risks and threats to the organization.
• Review state-of-the-art technology solutions and innovative information security management techniques to safeguard organizational assets.
• Ensure that both RTB (Run The Bank) and CTB (Change The Bank) activities are meticulously planned, addressing operational continuity, resource allocation, and compliance for RTB, and detailed project management, risk assessment, and change control for CTB.

Operating Environment and Framework :

Problem Solving :

Decision Making Authority & Responsibility :

Requirements