Security Architect --- Cape Town

This role will be responsible for providing technical security advice and guidance with a focus on the Group/South Africa organization. This candidate will be involved in multiple change projects and be responsible for producing and publishing tailored Security best practice guidance. Key Responsibilities •Providing security advice, requirements and guidance to the business when delivering new systems or updates to existing, to ensure Security by design. •Performing security-focused risk assessment on new systems/services and changes to existing to ensure they are within risk tolerance. •Working with the business to review designs and ensure that they are in line with existing security principles, patterns, standards, and best practice. •Work with the business to define, document, and implement core security patterns, standards, and guidelines. •Reviewing the current security processes within your area of focus, to ensure optimization and coverage. •Be the initial security point of contact for your region and route any questions to the relevant teams. •Work with the wider security architecture team to ensure a standardized approach to security is defined and followed. •Collaborate with IT teams to make sure the correct security controls and measures are in place before implementation. Requirements: •Bachelor’s degree or equivalent experience in computer science, IT engineering, or related field •An MSc Information Security or equivalent would be an advantage. •Information Security and/or Information Technology certifications such as CISSP etc. are desirable, also acceptable is having experience in this area, any security certification, CISSP may not be relevant in the SA market. •Azure Security Certifications are preferred: Azure knowledge is important. AWS is also ok. Understanding how firewalls work rather than building them. •Experience of common frameworks such as NIST, CIS, ISO27k and MITRE: Azure knowledge is important. AWS is also ok. Understanding how firewalls work rather than building them. •Experience in using SABSA valuable: Azure knowledge is important. AWS is also ok. Understanding how firewalls work rather than building them. •Review solution designs and recognize security concerns. •Work with vendors to understand the mitigations and make recommendations. •Be able to pragmatically review and understand where the security risk could outweigh the business benefits. •Represent both the business to security and security to the business. •Help make the business understand the importance of considering security in designs. •Ability to support the business in the delivery of security requirements. •Understanding of Threat Modelling frameworks and implementation e.g., STRIDE •Ability to deconstruct complex environments and navigate conflicting project requirements. •Work with the wider security team to mature security processes and patterns. •Prior experience working in Information security is essential. •Prior experience of working as a security architect is essential. •Prior experience of creating security artefacts is preferred.