Senior Cybersecurity Architect

Senior Cybersecurity Architect

Job description:

Senior Cybersecurity Architect

Role Summary:

Provides cybersecurity architecture, advisory, risk assessment and security transformation support across the organization. Works closely with IT, application, infrastructure, cloud, data, privacy and business teams to embed security into technology and business initiatives. Reports to the CISO.

Key Responsibilities

· Develop and maintain the organization's cybersecurity and security architecture roadmap.

· Conduct security assessments, risk assessments and technology gap assessments.

· Review security architecture for applications, cloud, network, IAM and digital transformation projects.

· Design and advise on Zero Trust, IAM/PAM, cloud security and data-security architectures.

· Define security requirements for new projects, applications, vendors and technology solutions.

· Review SIEM/SOC, EDR/XDR, DLP, WAF and vulnerability-management capabilities.

· Conduct third-party and vendor security assessments.

· Develop and maintain security policies, standards, guidelines and architecture principles.

· Support incident response, cyber resilience and security improvement initiatives.

· Provide AI security and AI governance guidance for AI adoption.

· Ensure alignment with ISO 27001, NIST, CIS Controls, healthcare regulations and organizational policies.

· Prepare security-risk reports, architecture documents and recommendations for the CISO and senior management.

· Work with project and technology teams to implement security-by-design.

· Mentor cybersecurity team members and support security capability development.

Required Expertise :

Security & Enterprise Architecture | Cybersecurity Risk & GRC | Cloud Security | IAM/PAM | Zero Trust | Network & Application Security | Data Security | SOC/SIEM/XDR | Third-Party Risk | Incident Response | AI Security & Governance

Experience:

10 –15 + years of cybersecurity/information-security experience.

Strong experience in security architecture, cybersecurity assessments and technology risk.

Experience in large enterprise or regulated environments.

Healthcare cybersecurity experience is an advantage.

Strong communication, stakeholder-management and documentation skills.

Preferred Certifications:

CISSP

TOGAF

CCSP

CISM / CGRC / CRISC

CISSP-ISSAP

Cloud Security certification

AI Security / AI Governance certification

HCISPP for healthcare environments