Security Architect (SABSA Certified)

About the role

An organization is looking for an experienced Security Architect with SABSA certification to design, develop and implement enterprise security architectures that align with business objectives, risk management requirements and regulatory standards. The role covers security strategy, threat modelling, cloud and identity security, and collaboration with enterprise architects, infrastructure and cybersecurity teams.

Key responsibilities

• Design and develop enterprise security architectures aligned with business goals, security requirements and risk appetite.
• Apply the SABSA framework to build business-driven security architectures and solutions.
• Conduct security architecture assessments, identify gaps and recommend controls and remediation.
• Develop security architecture roadmaps, reference architectures, principles, standards and design documentation.
• Translate business requirements and risk assessments into technical security requirements.
• Evaluate and integrate security controls across network security, cloud security, IAM, application security and data protection.
• Run threat modelling, security risk assessments and architecture reviews.
• Ensure compliance with regulations, industry standards and internal policies.
• Collaborate with enterprise architects, infrastructure and cybersecurity teams to embed security in technology initiatives.
• Guide security transformation, cloud adoption, infrastructure modernization and digital initiatives.
• Maintain security architecture documentation, risk registers, control matrices and governance artifacts.

Required profile

• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Information Technology or a related field.
• Relevant experience in cybersecurity or enterprise security architecture, preferably in complex enterprise environments.
• SABSA certification is mandatory, preferably at practitioner or architect level.
• Experience developing security architectures, patterns, reference models and roadmaps.
• Experience with security assessments, threat modelling and risk analysis.

Required skills

• Knowledge of ISO 27001, NIST Cybersecurity Framework and COBIT.
• Strong understanding of network security, IAM, cloud security, application security and data protection.
• Preferred: CISSP, CISM, CCSP or TOGAF; familiarity with Azure, AWS or Google Cloud; regulated industry experience.