About this role
Your role
As a Security Architect, you will act as the leading authority on security architecture, reporting to the Chief Technology Officer (CTO). You will be responsible for defining, governing and developing the security architecture strategy to ensure that ICT systems are secure, resilient and compliant. Your key responsibilities centre on the following areas:
- Security Design Authority: Translating security requirements into scalable architectural models (Zero Trust NIST 800-207, NIST CSF, ISO 27001, CIS Controls v8) for cloud, hybrid and on-premises environments.
- Governance & Integration: Define reference architectures and validate technical and integration designs within the architecture committee.
- DevSecOps & SSDLC: Manage and improve the secure software development lifecycle (NIST SSDF, OWASP SAMM, BSIMM). Design and implement automated CI/CD pipelines and integrate security tools (SAST, DAST, SCA, IaC analysis, secret detection).
- Cloud & API Security: Implement cloud-native security controls (CIS benchmarks, NIST 800-53/190, MITRE ATT&CK). Secure APIs (REST, GraphQL, OAuth 2.0/OIDC) and the software supply chain (SBOM generation and validation, artefact signing).
- Supporting teams: Facilitate threat modelling workshops (STRIDE, PASTA) and provide methodological guides (playbooks) to developers.
English: Fluency is essential, both written and spoken. Second language: Proficiency in French, Spanish or Arabic is an asset.