Security Architect (Consultant)

The Security Architect is responsible for designing and implementing comprehensive frameworks to assess and enhance application controls across the organization. This role ensures that critical applications are resilient to security threats by embedding robust controls into the architecture and aligning them with regulatory, compliance, and organizational standards. The Architect will play a pivotal role in shaping the security posture of enterprise applications through the development of security controls, conducting control gap assessments, and driving the adoption of secure application practices across the organization.

Key Responsibilities :

• Design and implement application control frameworks and secure architectural patterns for enterprise applications.
• Develop and apply methodologies for conducting application control risk assessments.
• Architect solutions to mitigate application vulnerabilities and enhance application resilience.
• Align application controls with regulatory requirements such as PCI DSS, NIST 800-53, ISO 27001.
• Drive the development and execution of application control frameworks, collaborating with vendors and internal teams.
• Design application control patterns to meet audit and compliance standards.
• Architect automated frameworks for continuous application control assessments and monitoring.
• Develop detailed assessment reports and remediation plans in collaboration with relevant stakeholders.
• Provide regular reports to senior management on the effectiveness of controls, gaps, and improvements.
• Manage an annual self-assessment calendar to ensure application owners regularly perform control assessments, track results, and drive remediation efforts.

Operating Environment and Working Relationships :

Problem Solving :

Decision-Making Authority & Responsibility :

Requirements