Security Architect

Offer expert guidance on Security Architecture to assist business and project teams in understanding the security implications of proposed system changes and solutions.

Evaluate proposed solutions to ensure compliance with Information Risk Policy and organizational risk tolerance.

Analyze non-standard flows across systems, applications, and proposed solutions to identify security risks, threats, and vulnerabilities.

Identify necessary security control components, countermeasures, and design requirements to address the identified risks.

Create conceptual and logical security architecture designs for proposed solutions.

Define security controls across various areas including Identity and Access, Data and Media Protection, Security Information, and Event Management, Communications, Configurations, and Vulnerability Management.

Determine suitable security controls to address identified risks, factoring in technical capability, business benefit, and commercial implications.

Manage technical deviations and major risks, including suggesting alternative solutions or compensating controls to mitigate potential impacts.

Influence stakeholders to update solution requirements to reflect relevant security needs.

Supervise significant architectural decisions to ensure secure outcomes and compliance with governance practices.

Assist in the deployment of required notifications and engagement with relevant Technology Architecture Forums.

Utilize and update existing security control reference patterns.

Develop new security patterns describing integration approaches, use cases, reusable components, and technical references for enterprise security capabilities.

Proactively manage security risk and assurance requirements when developing designs that may alter the organization's risk posture.

Support compliance with internal security policies, governance requirements, and risk management expectations.

Engage with various business and technology stakeholders to influence security aspects within target-state architectures and central technology roadmaps.

Provide guidance and mentorship on the practical application of security and risk management concepts, principles, strategies, and industry standards.

Assist in the professional development of colleagues by sharing security knowledge and helping them develop relevant capabilities.

Minimum of 10 years of experience in the technology industry.

Minimum of two years of Security Architecture experience; or minimum of five years of Solution Architecture experience with significant security exposure.

Degree in Computer Science, Information Systems, or an equivalent technical qualification.

Solid business engagement and stakeholder influence experience.

Proficient in providing fact-based analysis in navigating complex security and architectural topics.

Skilled in evaluating proposed solutions against information risk policies, security requirements, and agreed risk appetite.

Thorough understanding of conceptual and logical security architecture models and controls.

Capable of analyzing systems, applications, solution designs, and non-standard flows to identify security risks, threats, and vulnerabilities.

Experience in determining appropriate security controls, countermeasures, alternative solutions, and compensating controls.

Comprehensive understanding of security architecture domains such as Identity and Access, Data and Media Protection, Security Information and Event Management, Communications, Configurations, and Vulnerability Management.

Ability to balance security changes and technical capability with commercial considerations and business benefits.

Strong commercial acumen, business alignment, and negotiation skills.

Capable of managing significant architectural decisions and effectively engaging with senior management, sponsors, project leaders, and architecture governance forums.

Experience in developing, maintaining, or applying security control reference patterns and enterprise security capabilities.

Comprehensive understanding of security risk, assurance, governance, and compliance requirements.

Effective communication of security concerns to both technical and business stakeholders.

Proficient in handling difficult conversations and influencing stakeholders toward secure outcomes.

Strong coaching and mentoring capabilities.

Demonstrated capabilities in:

Relevant security certifications, such as CSSP.

Architecture or technology-related certifications, such as SABSA or Cloud Security certifications.

Attractive salary package

Guaranteed 13th-month salary

Performance-based bonus

Access to professional English course

Comprehensive health insurance

Generous annual leave allowance

PEGASI – IT Recruitment Consultancy | Email: recruit@pegasi.com.vn | Tel: +84 28 3622 8666