Senior Cyber Security Architecture Specialist

About the Role

You will play a pivotal role in shaping and advancing the Information Security Architecture domain and associated practices. Working under broad direction, you will partner with technology solution owners, functional leads, and project teams to embed security controls across infrastructure, platforms, applications, deployment pipelines, and governance activities. Your work will ensure alignment with cybersecurity frameworks, risk management strategies, and compliance obligations while championing best practice across the IT environment.

Key Responsibilities

• Build and maintain strong relationships with stakeholders, providing high-level consultative cybersecurity advice.
• Deliver specialist advisory services to assess security controls for project initiatives, operational changes, and CI/CD pipelines.
• Recommend and influence mitigation strategies to ensure solutions meet cyber security requirements.
• Manage and monitor the Information Security Architecture framework to ensure sustainability, efficiency, and strategic alignment.
• Lead cyber and information security initiatives including assessments, policy and standard design, assurance activities, and operational improvements.
• Manage cybersecurity assurance programs including penetration testing, vulnerability management, and audit remediation.
• Develop and maintain meaningful cybersecurity metrics and dashboards.
• Undertake additional duties as required.

What You Will Need

• Strong knowledge of cyber security frameworks including ISO 27001, NIST, and ASD ISM.
• Extensive experience identifying and mitigating risks across complex environments including infrastructure, applications, deployment pipelines, and cloud environments.
• Excellent communication and interpersonal skills with the ability to engage technical and non-technical stakeholders at all levels.
• Proven organisational skills with the ability to prioritise, meet deadlines, and manage multiple workstreams.
• Relevant certifications such as SABSA, TOGAF, CEH, CISSP, CISM or similar.
• Experience testing security controls across infrastructure, platforms, applications, pipelines and cloud.