Job description

Overview Of The Role:

• The Head of Security Architecture serves as the deputy to the CISO, providing strategic leadership and hands-on expertise in designing and implementing enterprise security architectures. The role involves technical depth and executive-level influence, ensuring the organization’s security posture is resilient and aligned with business objectives. It leads global security architecture and engineering functions, guides teams, influences stakeholders, and embeds security by design across the enterprise. The role is critical in defining strategies in AI security, Zero Trust, quantum readiness, and cloud-native security, and delivering architectural oversight for initiatives in cloud transformation, data protection, and secure SDLC practices.

What You Will Do:

Strategy & Leadership

• Define and drive the enterprise security architecture vision, strategy, and roadmap, aligned to business and technology strategy.
• Lead cross-functional efforts to embed security into business operations, digital transformation initiatives, and emerging technology adoption.
• Provide thought leadership on the evolving threat landscape, including AI security, Zero Trust, quantum readiness, and cloud-native security.
• Refresh and institutionalise the Group Security Strategy, establishing a Security Service Catalogue, ways of working, and a Target Operating Model.

Governance, Risk & Compliance

• Establish and maintain enterprise-wide architecture and security standards, frameworks, and patterns.
• Oversee security design reviews, risk assessments, and architecture assurance across projects, platforms, and third-party ecosystems.
• Partner with GRC teams to ensure compliance with global security, regulatory, and industry standards.
• Integrate security architecture with enterprise risk management, including vendor and third-party risk.
• Mature the Security Architecture operating model to improve consistency, scalability, and stakeholder satisfaction.

Technology & Architecture

• Define and maintain reference architectures, security controls, and technical standards across applications, infrastructure, cloud, and data environments.
• Drive secure adoption of emerging technologies including AI/ML, cloud-native services, Zero Trust, DevSecOps, and next-generation identity platforms.
• Provide architectural oversight for cloud transformation, data protection, identity management, and secure SDLC practices.
• Evaluate and integrate advanced cybersecurity tools to strengthen resilience and defense capability.

Security Engineering & Operations Collaboration

• Partner with engineering and SOC teams to embed architectural principles into operations, threat detection, and incident response playbooks.
• Support incident investigations and provide root cause analysis from an architectural perspective.
• Continuously improve defense-in-depth architecture and automate security controls at scale.

Team Leadership & Development

• Build, mentor, and lead high-performing architecture and engineering teams, fostering a culture of accountability and innovation.
• Define team structure, responsibilities, and career development pathways.
• Promote a collaborative and risk-aware culture across the organization.
• Act as a leader and coach, bridging technical depth with business acumen.

Skills

Required Skills To Be Successful:

• Strategy development and visionary leadership in security architecture.
• Experience with AI security, Zero Trust, quantum readiness, and cloud-native security strategies.
• Skills in establishing and maintaining security standards and frameworks across an enterprise.
• Ability to lead high-performing teams and foster a culture of accountability and innovation.

What Qualifies You For The Role:

• Bachelor’s or Master’s degree in Information Security, Computer Science, or a related discipline.
• Professional certifications such as CISSP, ISSAP, GIAC GDSA, CASP+/SecurityX, CISM, CCSP, SABSA, TOGAF or equivalent.
• 18+ years of progressive experience in information security, including 8+ years in enterprise security architecture or engineering leadership roles.
• Strong knowledge of modern security frameworks including Zero Trust, cloud-native security, secure DevSecOps, and IAM.