Lead Security Architect

About the role

The Lead Security Architect acts as a trusted advisor to the client, ensuring that new initiatives, applications, platforms and technologies are designed and introduced securely. This senior role provides risk‑based architecture guidance while aligning with security standards, regulatory obligations and industry best practices.

Key responsibilities

• Serve as security architecture advisor for new initiatives, transformation programs and technology procurements, reviewing applications, platforms, cloud and hybrid services.
• Identify architectural risks, control gaps and design weaknesses, and provide proportionate, risk‑based recommendations and compensating controls.
• Lead security design reviews, threat‑modelling workshops and define security patterns, guardrails and reference designs across identity, segmentation, encryption, API security and more.
• Evaluate third‑party and SaaS solutions for data residency, tenant isolation, shared‑responsibility boundaries and exit considerations.
• Maintain traceable records of decisions, risks and waivers, and support governance forums with material risk presentations.

Required profile

• Minimum 10 years of cybersecurity experience, including at least 5 years in security architecture or related roles.
• Bachelor’s degree in Cybersecurity, Computer Science, IT, Engineering or related field; master’s preferred.
• Strong knowledge of UAE cybersecurity and data‑protection obligations for government and healthcare sectors.

Required skills

• Enterprise security architecture
• Risk management
• Threat modelling
• Security‑by‑design principles
• Cloud, on‑premises and hybrid architecture experience
• ISO/IEC 27001
• NIST Cybersecurity Framework
• NIST SP 800‑53
• CIS Controls
• SABSA
• TOGAF
• OWASP
• IAM/PAM
• Application infrastructure