Architect - Cyber Security

Key Responsibilities

Lead and oversee the Cyber Threat and Vulnerability Management (CTVM) program across infrastructure, applications, cloud services, and digital assets

Coordinate vulnerability assessments, penetration testing, security reviews, remediation tracking, and risk reporting

Maintain visibility of IT assets and ensure accurate hardware and software inventories

Coordinate security assessments, including cloud, application, AI, and configuration security reviews

Oversee security testing activities within DevSecOps pipelines, including SAST, DAST, secret scanning, and software composition analysis

Monitor SOC, EDR, and MDR services to ensure timely detection, escalation, investigation, and resolution of security events

Lead cybersecurity incident response, root cause analysis, remediation, and lessons-learned activities

Maintain cybersecurity policies, procedures, operating models, and incident response readiness

Establish and monitor cybersecurity KPIs, KRIs, dashboards, and management reports

Identify security improvement opportunities and provide risk-based recommendations to management

Collaborate with technical teams and stakeholders to strengthen cybersecurity controls, compliance, and enterprise-wide resilience

Person Specifications

Bachelor's degree in Information Security, Computer Science, IT, or a related discipline

7–10 years of experience in cybersecurity, particularly vulnerability management, security assessments, security monitoring, and incident response

Strong understanding of the end-to-end vulnerability management lifecycle, including risk prioritisation, patching, and remediation

Hands-on experience with security tools such as Nessus, Burp Suite, CrowdStrike, EDR, MDR, and attack surface management solutions

Knowledge of application security, cloud security, threat intelligence, and adversary tactics, techniques, and procedures (TTPs)

Familiarity with security frameworks and regulatory requirements, including CIS Controls, ISO 27001, BNM RMiT, and CSA Cloud Controls Matrix

Strong incident coordination, risk assessment, stakeholder management, and reporting capabilities

Excellent communication and analytical skills, with the ability to engage technical and non-technical stakeholders

CISM, CRISC, CEH, OSCP, or equivalent cybersecurity certifications are advantageous

Vendor submissions - 12 months
Originally posted on Himalayas