Chi tiết công việc Security Architect tại The Code Talent Co,. Ltd
Role Overview
We are seeking an experienced Security Architect to design, review, and govern enterprise security architectures that protect critical business systems, applications, and data. This role will work closely with business stakeholders, project teams, solution architects, and engineering teams to ensure security requirements are embedded throughout the solution lifecycle while enabling business transformation.
The successful candidate will provide technical leadership in security architecture, identify security risks, recommend appropriate security controls, and ensure solutions align with enterprise security standards, governance frameworks, and risk appetite.
Key Responsibilities
Security Architecture & Design
Design secure architecture solutions for enterprise applications, cloud platforms, infrastructure, and digital transformation initiatives.
Develop conceptual and logical security architectures aligned with business and technology strategies.
Define security patterns, reference architectures, and reusable security design principles.
Ensure security is incorporated throughout the solution delivery lifecycle.
Security Risk Assessment
Review solution designs and identify potential security risks, threats, and vulnerabilities.
Perform security architecture reviews and provide recommendations to mitigate identified risks.
Define compensating controls where business requirements prevent implementation of standard security controls.
Ensure compliance with enterprise security policies and industry standards.
Security Governance
Provide expert security architecture guidance to project teams, solution architects, and business stakeholders.
Participate in architecture governance forums and design review boards.
Support security governance processes, technology standards, and security assurance activities.
Ensure projects comply with enterprise security requirements and risk management practices.
Security Control Design
Design and recommend security controls across domains including:
Identity & Access Management (IAM)
Data Protection & Data Security
Application Security
Infrastructure Security
Network Security
Cloud Security
Security Information & Event Management (SIEM)
Vulnerability Management
Configuration & Hardening Standards
Secure Communications
Stakeholder Management
Partner with business leaders, project managers, solution architects, and engineering teams to understand business requirements.
Communicate security risks and technical recommendations to both technical and non-technical stakeholders.
Influence solution decisions while balancing business objectives with security requirements.
Build trusted relationships across technology and business functions.
Continuous Improvement
Develop and maintain enterprise security reference architectures.
Evaluate emerging technologies and assess associated security implications.
Promote secure design principles and industry best practices.
Mentor junior architects and engineers on security architecture and risk management.
Required Skills & Experience
Technical Skills
Enterprise Security Architecture
Security Design & Review
Risk Assessment & Threat Modelling
Cloud Security (AWS, Azure and/or GCP)
Identity & Access Management (IAM)
Network Security
Application Security
Data Security
Vulnerability Management
Security Governance & Compliance
Enterprise Architecture Frameworks
Security Standards & Best Practices
Soft Skills
Strong analytical and problem-solving skills
Excellent stakeholder management and communication
Ability to influence senior technical and business leaders
Strong decision-making and strategic thinking
Commercial awareness with the ability to balance business and security requirements
Negotiation and relationship management skills
Qualifications
Mandatory
Bachelor's Degree in Computer Science, Information Technology, Information Systems, Cyber Security, or a related discipline.
10+ years of experience in Information Technology.
5+ years in Security Architecture or equivalent Solution Architecture with strong security expertise.
Preferred Certifications
CISSP
SABSA
CCSP
AWS Security Specialty
Microsoft Azure Security Engineer
TOGAF (advantage)
Other Cyber Security or Enterprise Architecture certifications
