Cyber Application Security Architecture - 3184

3184 Cyber Application Security Architecture

Who We Are

The Cyber Architecture Team within the bank’s Cyber Defense Division is responsible for defining and leading the organization's cybersecurity strategy, establishing architectural security standards, supporting strategic projects, and embedding security principles across the bank’s core systems, infrastructure, and digital channels.

The team works closely with senior management, enterprise architecture teams, technology units, and corporate governance stakeholders.

Key Responsibilities

Define and lead the Secure Software Development Lifecycle (SSDLC) strategy and framework.

Review and approve architectures for systems and strategic projects.

Lead Architecture Governance processes and establish enterprise-wide security standards.

Support technology projects across application, cloud, and AI domains.

Perform Threat Modeling and identify security risks during the design phase.

Collaborate closely with Development Managers and engineering teams.

What You Bring

Proven experience of at least 5 years leading Information Security Architecture in enterprise-scale environments.

Software development background (e.g., Python, Java, Node.js, Go, or similar programming languages) – significant advantage.

Extensive experience implementing Secure SDLC practices and integrating automated security tools (SAST, DAST, SCA, ASPM) into CI/CD pipelines.

Hands-on experience in Application Security, including identifying and mitigating application vulnerabilities.

Experience conducting Threat Modeling, architecture reviews, defining security requirements, and developing risk mitigation solutions.

Experience in Cloud Security Architecture across AWS, Azure, and/or GCP environments.

Deep understanding of Web, Mobile, API, Cloud, Microservices, and Container architectures.

Strong familiarity with industry security methodologies and standards such as OWASP Top 10, OWASP API Security Top 10, SAMM, and BSIMM.

Knowledge of AI/GenAI security risks and LLM/Agent security – an advantage.

Familiarity with security infrastructure and defensive security frameworks – an advantage.

Excellent English communication skills, including writing technical documentation and leading professional discussions.

Strong leadership skills with the ability to drive cross-functional initiatives across technology and business stakeholders.