Cybersecurity Architect

Company Description

Arηs Group, Part of Accenture, specializes in the management of complex public sector IT projects, including systems integration, informatics and analytics, solution implementation and program management. Our team helps lead clients through digital and information systems design, bringing expertise in a variety of areas ranging from software development, data science and security management to machine learning, cloud, and mobile development.

Arηs Group was acquired by Accenture in July 2024.

Job Description

• Design, develop and maintain enterprise cybersecurity architectures aligned with organisational strategy and risk posture
• Define and implement security architecture frameworks, models and standards across systems, services and platforms
• Translate business and functional requirements into secure architectural designs and technical specifications
• Lead the design of cybersecurity solutions following security-by-design and privacy-by-design principles
• Produce and maintain high-level and detailed security architecture documentation
• Evaluate and select appropriate security controls, technologies and solutions (e.g. cryptography, access control, network security)
• Conduct security architecture reviews and ensure compliance with relevant standards, frameworks and regulations
• Integrate cybersecurity controls into system development lifecycle and ensure secure implementation practices
• Analyse emerging threats, vulnerabilities and technology trends to continuously improve security architectures
• Collaborate with stakeholders, development teams and IT operations to ensure effective implementation of security solutions
• Perform risk assessments and evaluate the impact of security measures on overall system architecture and performance
• Lead the integration of security components into existing enterprise architecture frameworks
• Support Proof of Concept (PoC) activities to evaluate new cybersecurity solutions
• Ensure alignment between cybersecurity strategy, IT architecture and organisational business objectives
• Contribute to the definition and evolution of the enterprise security architecture blueprint
• Support transition of solutions into operational teams and ensure maintainability and scalability
• Provide architectural leadership and guidance to technical teams and stakeholders
• Recommend improvements to existing systems, processes and controls to enhance security posture
• Monitor technology developments and incorporate relevant innovations into the architecture
• Perform additional tasks as assigned by the supervisor

Qualifications

• Minimum of 10 years of relevant IT professional experience, including at least 8 years in similar cybersecurity architecture roles
• Excellent knowledge of cybersecurity frameworks, standards and best practices (e.g. ISO 27001, NIST, SABSA, TOGAF)
• Strong understanding of security architecture models, secure development lifecycle and enterprise architecture principles
• Experience in cybersecurity requirements analysis and design of secure systems and architectures
• Deep knowledge of cybersecurity controls, solutions, threats, risks and mitigation strategies
• Understanding of legal, regulatory and compliance requirements (including privacy and data protection)
• Familiarity with Privacy-Enhancing Technologies (PET) and modern security solutions
• Ability to conduct business and user requirements analysis and translate into technical architecture
• Strong ability to design resilient architectures and eliminate single points of failure
• Excellent communication skills with the ability to present complex security concepts to stakeholders
• Experience guiding technical teams and providing architectural leadership
• Strong analytical, problem-solving and decision-making skills
• Ability to balance security requirements with business needs and operational constraints
• Good understanding of organisational strategy, processes and risk landscape
• Ability to stay up-to-date with evolving cybersecurity trends and technologies

Certifications

At least four of the following certifications (or internationally recognized equivalents):

• CISSP (Certified Information Systems Security Professional)
• CISA (Certified Information Systems Auditor)
• CISM (Certified Information Security Manager)
• SABSA Chartered Security Architect (Foundation or higher)
• TOGAF Foundation or TOGAF Certified
• CNDA (Certified Network Defence Architect)
• CISSP-ISSAP (Information Systems Security Architecture Professional)
• CGEIT (Governance of Enterprise IT)
• CRISC (Risk and Information Systems Control)
• GIAC certifications (GSNA, GCCC, GPPA)

Additional Information

• Minimum education level: Level 7 (Bachelor’s or equivalent)
• English proficiency: minimum C1 level
• Experience in large-scale enterprise or public sector environments is considered an asset