Lead System Security Architect

Job Summary Lead the design and governance of enterprise security architecture across a diverse group of businesses. Drive security strategy, risk management, and the adoption of modern security technologies to protect critical IT and OT environments. Responsibilities Lead the design, development, and implementation of enterprise security architectures across IT, cloud, network, application, and operational technology (OT) environments. Partner with the Group CISO to define and execute cybersecurity strategies, governance frameworks, and security roadmaps. Develop and maintain enterprise security standards, architecture principles, reference models, and best practices. Provide technical leadership on secure solution design, threat modelling, and security architecture reviews for business initiatives and technology projects. Establish and enhance governance, risk, and compliance (GRC) processes across multiple business entities. Conduct security risk assessments, identify vulnerabilities, and recommend mitigation strategies. Evaluate emerging security technologies and recommend solutions to strengthen the organisation's security posture. Collaborate with business, technology, audit, and compliance teams to ensure security controls align with regulatory and business requirements. Lead cross-functional security initiatives and coordinate security activities across multiple subsidiaries. Monitor evolving cyber threats, including AI and quantum computing risks, and recommend strategies to improve organisational resilience. Support project and programme delivery by providing security guidance throughout the solution lifecycle. Prepare reports, security documentation, and executive updates for senior management. Requirements Bachelor's Degree in Computer Science, Computer Engineering, Information Security, or a related discipline. Minimum 5 years of experience as a System Security Architect, with a strong background in enterprise security architecture. Previous experience in IT infrastructure, enterprise architecture, or cloud architecture. Strong knowledge of security architecture principles, secure system design, and threat modelling. Experience with Governance, Risk & Compliance (GRC), security frameworks, and enterprise risk management. Good understanding of cloud security, Zero Trust architecture, network security, identity and access management, cryptography, and secure software development. Hands-on experience with security frameworks such as NIST Cybersecurity Framework (CSF) , CIS Controls , MITRE ATT&CK , and OWASP Top 10 . Experience conducting security assessments, security architecture reviews, and risk analysis. Strong project or programme management experience. Excellent communication, documentation, stakeholder management, and presentation skills. Professional certifications such as CISSP, SABSA, TOGAF, CCSP, CISM, or GIAC are highly desirable.