Cyber & Information Security Architect

Cyber & Information Security Architect

We are seeking a highly skilled Cyber & Information Security Architect to join our Governance & Compliance team.

What will you do?

Lead security architecture and provide guidance for business, infrastructure, and application projects

Define and write security requirements and documentation for new systems and organization-wide projects

Conduct risk assessments and manage cyber risk in business and technology initiatives, including deep understanding of PCI standards

Develop and implement security solutions and policies, with a strong focus on infrastructure and cloud environments

Promote and embed secure development practices across the organization, including setting application security standards

Oversee implementation of security policies across systems and projects

Research and evaluate new cybersecurity technologies and solutions for both on-prem and cloud environments

Maintain strong cross-functional relationships with stakeholders across the organization

Provide a holistic view of the organization’s security posture and drive activities to reduce exposure and threats

What are we looking for?

Minimum 5 years of hands-on experience in cyber and information security roles - Must

Proven experience as a Cybersecurity Architect - Must

Strong background in secure cloud architecture and secure development in cloud-native environments - Must

Experience in cloud environments with GCP - Must

Experience working in a regulatory-driven environment and information security standards - Must

Experience in secure development methodologies (Agile, SDLC) – Must

Deep knowledge of code scanning tools and secure development processes - Must

Experience with risk assessments, threat modeling, and understanding of attacks such as DDoS, Ransomware, and OWASP Top 10 - Must

Familiarity and proven experience with core security tools and technologies: Proxy, Firewall, F5, RBI, DLP, EDR - Must

Strong expertise in designing security architecture for both on-premises and cloud-based environments - Must

In-depth understanding of PCI-DSS standards – Must