The Security Architecture Lead is a newly created role responsible for establishing and maturing the organisation's enterprise security architecture capability. This individual will define security architecture principles, standards, and roadmaps, ensuring security is embedded consistently across business and technology initiatives.
As a greenfield role, the Security Architecture Lead will build foundational architecture frameworks, influence design decisions across platforms and regions, and lead a small team of security architects. The role partners closely with IT, digital, infrastructure, and application teams to enable secure, scalable, and resilient technology outcomes.
This role reports to the Group CISO.
Responsibilities:
Security Architecture Strategy & Foundations
- Define and implement the enterprise security architecture vision, principles, and reference architectures aligned with business and risk objectives.
- Establish security architecture standards covering cloud, infrastructure, applications, identity, data, endpoint, and network security.
- Develop multi-year security architecture roadmaps and investment priorities in partnership with the Group CISO.
Architecture Governance & Design Assurance
- Own security architecture governance, including design review processes, architectural decision records, and exception management.
- Ensure security is embedded into technology transformation, cloud adoption, and digital initiatives through secure-by-design practices.
- Provide clear guidance on security patterns, control selection, and risk trade-offs to technology teams.
Platform, Cloud & Identity Security
- Lead security architecture for cloud and hybrid environments, including identity and access management, network segmentation, and data protection.
- Partner with infrastructure and platform teams to ensure consistent security controls across global environments.
- Define security requirements for emerging technologies and new platforms.
Team Leadership & Capability Building
- Build and lead a high-impact security architecture team, setting role clarity, standards, and development plans.
- Establish repeatable ways of working, templates, and playbooks to scale security architecture influence across the organisation.
- Mentor architects and act as a senior escalation point for complex security design decisions.
Stakeholder Engagement & Advisory
- Act as a trusted advisor to senior technology leaders, providing pragmatic security guidance aligned to business priorities.
- Collaborate with risk, compliance, and security operations teams to ensure architectural designs are operationally executable and audit-ready.
Requirements:
- 10+ years of experience in information security, security architecture, or technology risk roles.
- Proven experience defining and implementing enterprise security architecture in complex, multi-region organisations.
- Strong technical foundation across cloud security, identity, infrastructure, network, and application security.
- Experience establishing security standards, reference architectures, and design assurance processes from the ground up.
To apply:
If you're interested to apply or find out more, please share across your CV or reach out to Chen Yi at [Confidential Information] for a discussion. Due to anticipated high volume of applications, we regret to inform that only shortlisted candidates will be notified.
Reg: R1876389
Lic: 16S8060
