information security architect

Paramount Computer Systems FZ LLC

<br/><p>Cyber Security Solution Architect is responsible for designing, implementing, and maintaining robust cybersecurity solutions to protect the organization&#x27;s systems, networks, and data. The role involves assessing security risks, developing strategies to mitigate threats, and ensuring compliance with security standards and best practices. Role is ideal for candidates with strong technical expertise, strategic vision, and the ability to bridge business needs with security requirements to build a resilient cybersecurity posture.</p><br/><ul><li>Act as the primary point of contact prior and during complex cyber security projects.</li><li>Monitor solution adoption and ensure successful achievement of desired outcomes with the deployed technologies or services</li><li>Provide proactive support and guidance to address delivery units or project teams needs and challenges.</li><li>Identify and implement enhancements to improve solution performance and satisfaction.</li><li>Collaborate with internal stakeholders to ensure seamless delivery and alignment of services.</li><li>Act as a liaison between different project of delivery units, address concerns and drive cross-functional collaboration.</li><li>Build and maintain strong, long-term relationships with delivery or project units to ensure their loyalty and satisfaction.</li><li>Conduct regular customer check-ins, feedback sessions, and strategic reviews to strengthen the partnership.</li><li>Act as a cyber security team advocate within the organization, ensuring that all needs and feedback are communicated to other teams.</li></ul><br/>

Cybersecurity Solution Architect

CodeNinja

<b>About the Role:</b><br>
We are seeking a highly skilled Infrastructure Security Architect to join the Architecture Unit of one of Saudi Arabia’s largest banks. This team is driving the design and protection of the bank’s hybrid infrastructure, spanning on-premises data centers, private cloud, and public cloud environments.
<br>This is a hands-on, senior-level role requiring deep technical expertise in infrastructure and cloud security, with a strong background in banking or regulated financial environments. You will define, implement, and govern secure architecture standards that safeguard the bank’s critical systems and digital assets.
<br><br>
<b>Key Responsibilities:</b><br>
<b>Architecture & Strategy:</b><br>
<ul>
<li>Design and maintain secure hybrid infrastructure architectures integrating on-prem, private cloud, and public cloud (OCI / Azure / GCP).</li>
<li>Define security reference architectures, baseline configurations, and zero-trust network models.</li>
<li>Collaborate with enterprise architects to ensure security-by-design across infrastructure initiatives.</li>
</ul>
<b>Hands-On Implementation & Hardening:</b><br>
<ul>
<li>Deploy and configure security controls for firewalls, WAF, IDS/IPS, DDoS protection, Email & API security gateways, VPN, NAC, endpoint protection, IAM, and SIEM solutions.</li>
<li>Harden operating systems, databases, virtualization, and container environments.</li>
</ul>
<b>Cloud & Virtualization Security:</b><br>
<ul>
<li>Secure workloads across VMware, Hyper-V, and container platforms (Kubernetes, OpenShift).</li>
<li>Integrate cloud-native security controls into multi-cloud environments.</li>
</ul>
<b>Security Monitoring & Response:</b><br>
<ul>
<li>Collaborate with SOC teams to enhance detection, alerting, and incident response.</li>
<li>Integrate SIEM / SOAR tools for threat monitoring and correlation.</li>
<li>Lead root-cause analysis and drive security remediation initiatives.</li>
</ul>
<b>Compliance & Risk Management:</b><br>
<ul>
<li>Ensure adherence to SAMA CSF, NCA ECC, SWIFT CSP, PCI DSS, and NIST standards.</li>
<li>Develop audit-ready documentation, security blueprints, and policy frameworks.</li>
<li>Conduct threat modeling and define risk mitigation strategies.</li>
</ul>
<b>Requirements:</b><br>
<b>Qualifications:</b><br>
<ul>
<li>Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.</li>
<li>12+ years of hands-on experience in infrastructure security and network architecture.</li>
<li>Proven experience in the financial or regulated sectors (preferably banking).</li>
<li>Expertise in:</li>
<li>Firewalls, WAF, IDS/IPS, DDoS, secure email gateways, API gateways, and SIEM.</li>
<li>VPN, SD-WAN, and endpoint protection (EDR/XDR, NAC).</li>
<li>Virtualization and container platforms.</li>
<li>Cloud security across OCI, Azure, and/or GCP.</li>
</ul>
<b>Preferred Certifications:</b><br>
<ul>
<li>CISSP, CCSP, CISM, or equivalent cloud architecture certifications (OCI / Azure / GCP).</li>
</ul>


Infrastructure Security Architect

Cornerstone OnDemand

<div><b>We're looking for a</b>
<p><b>Cybersecurity Architect</b></p><b>
 </b><b>This role is</b> <b>Hybrid, Santa Monica Office</b><p></p><p><b>
The Cybersecurity Architect</b> is a hands-on role responsible for evaluating, designing, and implementing security and compliance controls. This position plays a critical role in protecting Cornerstone OnDemand (CSOD) from internal and external threats through architecture reviews and ongoing assessments to identify, interpret, and remediate vulnerabilities across our cloud environments. You will lead the design and implementation of security and compliance controls across our AI/ML and cloud ecosystems, partnering closely with engineering, data science, and platform teams to embed security-by-design principles.</p><p><b>
Hybrid in Santa Monica or Dublin, CA office</b></p>
<p><b>
In this role you will&hellip;</b></p>
<ul>
<li>Design and implement controls for model training, fine-tuning, RAG workflows, agent/tool execution, and model serving on AWS (Bedrock, SageMaker, EKS) and GCP (Vertex AI, GKE).</li>
<li>Establish LLM guardrails: prompt input/output filtering, content policy enforcement, tool permissioning, sensitive data protection, and output safety evaluation.</li>
<li>Design and develop, cloud security solutions in AWS and GCP environments and drive automation to secure critical and sensitive data, services, applications, and infrastructure across our fast-growing organization.</li>
<li>Drive threat modeling and secure coding practices; conduct secure code reviews and coach teams on remediation.</li>
<li>Strengthen API and browser security: input validation, output encoding, CSRF/CORS, rate limiting, abuse prevention, and robust authZ models.</li>
<li>Participate in architecture and design reviews with development/DevOps staff to incorporate effective security standards into design</li>
<li>Provides guidance on data analysis and reporting, including the use of complex analysis or machine learning. Integrates and builds upon existing automation, security operations, and monitoring systems.</li>
<li>Stay abreast of security development practices, including the research of current and evolving trends</li>
<li>Must be able to perform hands-on support for a wide range of security technologies including, but not limited to: Pipeline security, DevSecOps, CloudFormation templates, Docker, Kubernetes, SIEM, IPS, Vulnerability Scanners</li>
</ul>
<p><b>You&rsquo;ve got what it takes if you have&hellip;</b></p>
<ul>
<li>Bachelor&rsquo;s degree in an Information Technology-related field of study or equivalent</li>
<li>7+ years of experience in system, network, cloud security and risk management.</li>
<li>2+ years securing AI/ML or LLM systems (training, fine-tuning, inference, or RAG) in production.</li>
<li>Strong knowledge of networking concepts, protocols (TCP/IP, HTTP, DNS, TLS) and technologies including firewalls, TLS, IDS/IPS system, cryptographic systems, identity management systems, RADIUS, etc</li>
<li>Experience working in multiple security domains such as cloud security, platform hardening, vulnerability management, web application and browser security, penetration testing, applied cryptography, network protocols and secure network design</li>
</ul><ul><li>Good experience with a wide range of AWS or GCP tools and deep practical experience with AWS and Google Cloud.</li>
</ul><ul><li>Programming and automation: strong Python; working knowledge of Node.js; scripting and automation for pipelines and controls.</li>
</ul><ul><li>Good experience with a wide range of AWS tools and deep practical experience with AWS and Google Cloud.</li>
<li>Experience implementing security practices in a CI/CD environment</li>
</ul><ul><li>Ability to translate risk into actionable engineering work; excellent documentation and communication.</li>
<li>Excellent at multitasking, and open to constant learning</li></ul><p></p><p><b><br>
Our Culture:</b></p><p>
Spark Greatness. Shatter Boundaries. Share Success. Are you ready? Because here, right now &ndash; is where the future of work is happening. Where curious disruptors and change innovators like you are helping communities and customers enable everyone &ndash; anywhere &ndash; to learn, grow and advance. To be better tomorrow than they are today.</p><p><b>
Who We Are:</b></p><p>
Cornerstone powers the potential of organizations and their people to thrive in a changing world. Cornerstone Galaxy, the complete AI-powered workforce agility platform, meets organizations where they are. With Galaxy, organizations can identify skills gaps and development opportunities, retain and engage top talent, and provide multimodal learning experiences to meet the diverse needs of the modern workforce. More than 7,000 organizations and 100 million+ users in 180+ countries and in nearly 50 languages use Cornerstone Galaxy to build high-performing, future-ready organizations and people today.
</p><p><b>Total Rewards:</b></p><p>
At Cornerstone, we are dedicated to inspiring excellence and pushing boundaries in everything we do. Our compensation strategy is based on three fundamental principles: equitable pay, market-driven research, and skill-based appraisals. As part of our mission to share success and empower individuals to thrive in an ever-changing world, the listed salary range is just one element of Cornerstone&rsquo;s comprehensive compensation package. This compensation package may also include annual bonuses, short- and program-specific awards depending on the role, and a comprehensive benefit offering. The disclosed salary range reflects the geographic differential based on the location of the position if applicable. The starting salary for the successful applicant will depend on several job-related factors, including education, training, experience, certifications, location, business needs, and market demands. This range is based on a full-time position and may be adjusted in the future. Join us in shaping the future of work &mdash; tomorrow, together. Experience flexibility and empowerment in your career at Cornerstone. The BASE salary range for this position is: 140800 - 225300 USD.
</p><p>Check us out on LinkedIn, Comparably, Glassdoor, and Facebook!</p>
<p>Equal Employment Opportunity has been, and will continue to be, a fundamental commitment at Cornerstone OnDemand. All qualified applicants are given consideration regardless of race, religion, color, gender, sex, age, sexual orientation, gender identity, national origin, marital status, citizenship status, disability, veteran status, or any other protected class as provided in applicable Federal, State, or Local fair employment laws. If you have a disability or special need that requires accommodation, please contact us at careers@csod.com or +1 855 454 8433.</p><p>
Read the EEO is the Law poster here, and the supplementary poster here
</p><p>Read the Read the Pay Transparency Nondiscrimination Provision poster here</p></div>

Cybersecurity Architect

Microsoft

<div><div>Microsoft aspires to help our customers achieve their secure digital transformation, leveraging the power of Microsoft Cloud security solutions and support offerings. Microsoft&rsquo;s Security platform and products leverage and secure Azure, the most comprehensive, innovative, flexible, and Secure cloud platform today, and Microsoft 365, the most comprehensive productivity and collaboration platform. Microsoft is hiring security professionals to drive customer security adoption for customers around the world. Microsoft continues to invest over $1B per year in cybersecurity and research, to provide its customers with solutions that integrate across the ecosystem by connecting and securing all of your identities, endpoints, apps, emails, docs and clouds to help you close critical gaps in coverage, reduce risk, and save costs with a streamlined security portfolio.</div><div></div><div><br>
We are looking for a <b>Cloud Solution Architect (CSA) &ndash; </b><b>Data Security</b> who is passionate about driving our customers&rsquo; security &amp; AI transformation on the Microsoft Platform. This is a customer-facing role acting as a trusted advisor for customers attempting to secure their entire data estates against internal and external data risk. Microsoft Purview&rsquo;s integrated Data Security services support customers holistically securing data by Protecting Sensitive Data using data classification, sensitivity labelling and encryption policies. You will be managing Insider Risks using machine learning detection controls and indicators, adaptive protection to dynamically enforce controls and advanced privacy controls. You will be responsible for preventing Data Loss using built in exfiltration policies for Microsoft 365 apps, services and endpoints. This role owns the technical relationship between the customer and Microsoft, helping customers to leverage their Microsoft investments through architecture, implementation, and operational health engagements.</div><div><br>
Microsoft&rsquo;s mission is to empower every person and every organization on the planet to achieve more. As employees we come together with a growth mindset, innovate to empower others and collaborate to realize our shared goals. Each day we build on our values of respect, integrity, and accountability to create a culture of inclusion where everyone can thrive at work and beyond.</div><div><br>
We are currently looking for <b>Cloud Solution Architect - </b><b>Data Security</b> professionals to join our teams across our various business groups: Enterprise, Regulated Industries and our One Commercial Partner group. By applying to this role, you will be considered for multiple opportunities within Microsoft across the United States including locations beyond where the role is posted. This role is flexible in that you can work up to 100% from home. Travel percentages will vary according to role.</div><h2 class="jobSectionHeader"><b>
Responsibilities</b></h2><ul><li>
Drive positive Customer Satisfaction and become a trusted advisor and provide feedback and insights from customers/partners and be the Voice of Customer to share insights and best practices, connect with Global Security teams at Microsoft, Engineering and Product teams to remove blockers and influence the solution roadmap.</li><li>
Land an end-to-end value prop for Security (i.e., Zero Trust) which spans the breadth of Microsoft Security offerings, and with focus on Threat Protection, ID + Access Management and Cloud Security.</li><li>
Support customers through the adoption lifecycle, through planning, adoption, deployment and optimization as you support increasing drive of Microsoft security products utilization as you lead technical solutioning and nurturing across the customer journey.
</li><li>Deliver technical presentations &amp; demos and propose high-level solutions and work with key Microsoft and Partner resources to drive deployment &amp; customer adoption Identify cross sell/upsell/Unified opportunities through customer engagement.</li><li>
Align your individual skilling to team/area demands and Customer Success goals and accelerate customer outcomes - Share expertise, contribute to IP creation &amp; re-use to accelerate customer outcomes.</li><li>
Run Architectural Design Session to build a plan for implementing the solution &ndash; governing design in line with customer business goals and their technical environment. Outcome is consensus on solution design and next steps toward production.</li><li>
Collaborate and orchestrate with other Cloud Solution Architects and MS stakeholders including FastTrack, partner, and Microsoft Consulting in developing complex end-to-end Enterprise solutions with the Microsoft Security platform.</li></ul><ul><li>
Other</li><li><ul><li>
Embody our Culture and Values</li></ul></li></ul><h2 class="jobSectionHeader"><b>
Qualifications</b></h2><div><b>
Required Qualifications</b></div><ul><li>
Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 4+ years experience in cloud/infrastructure technologies, information technology (IT). consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting.</li><li><ul><li>
OR equivalent experience.</li></ul></li><li>
Good understanding of the principles of Data Security, such as data classification, encryption, sensitivity labelling, information protection policies and exfiltration controls.</li><li>
Experience in the implementation (end to end) of Data Security projects with Data Security Platforms, preferably experience with Microsoft Purview (Information Protection, Data Loss Prevention, Information Risk Management)</li></ul><h4 class="jobSectionHeader"><b>
Other Requirements:</b></h4><ul><li>
Microsoft is unable to sponsor a work visa for this role due to the nature of the role&rsquo;s job duties</li></ul><div><b>
Preferred Qualifications</b></div><ul><li>
Bachelor's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 12+ years experience in cloud/infrastructure technologies, information technology (IT) consulting/support, systems administration, network operations, software development/support, technology solutions, practice development, architecture, and/or consulting.</li><li><ul><li>
OR Master's Degree in Computer Science, Information Technology, Engineering, Business, or related field AND 8+ years experience in cloud/infrastructure technologies, technology solutions, practice development, architecture, and/or consulting.</li><li><ul><li>
OR equivalent experience.</li></ul></li></ul></li><li>
Technical Certification in Cloud (e.g., Azure, Amazon Web Services, Google, security certifications)<ul><li>
Threat protection, SIEM and Incident Response; Extended Detection and Response (XDR); Security Orchestration, Automation, and Response (SOAR); Security Operation Center Management; Identity and Access Management; Cloud Infrastructure; Cloud Security; Data Security; Certification in one or more of the following technologies preferred: Microsoft 365 Security Administrator, Microsoft Security Operations, Cloud Security, CCSP, CEH, OSCP, GSEC.</li></ul></li></ul><ul><li>
6+ years experience working in a customer-facing role (e.g., internal and/or external).</li><li>
6+ years experience working on technical projects.</li><li>
Experience working with Microsoft 365 services and/or Azure data services such as Sharepoint, Teams, Office 365, SQL, Azure Data Lake Services</li></ul><div><div>
Cloud Solution Architecture IC4 - The typical base pay range for this role across the U.S. is USD $106,400 - $203,600 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $137,600 - $222,600 per year.</div><div></div><div><br>
Cloud Solution Architecture IC5 - The typical base pay range for this role across the U.S. is USD $130,900 - $251,900 per year. There is a different range applicable to specific work locations, within the San Francisco Bay area and New York City metropolitan area, and the base pay range for this role in those locations is USD $165,600 - $272,300 per year.<br>
<br>
Certain roles may be eligible for benefits and other compensation. Find additional benefits and pay information here: https://careers.microsoft.com/us/en/us-corporate-pay
<br>
<br>
Microsoft will accept applications and processes offers for these roles on an ongoing basis.</div></div><br>
<div></div>
Microsoft is an equal opportunity employer. Consistent with applicable law, all qualified applicants will receive consideration for employment without regard to age, ancestry, citizenship, color, family or medical care leave, gender identity or expression, genetic information, immigration status, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran or military status, race, ethnicity, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable local laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application process, read more about requesting accommodations.</div>

Senior Cloud Solution Architect - Data Security

QatarEnergy LNG

<div>
 Job description:
 <br/>
 <br/>
 <strong>
  Job Specification
 </strong>
 Job Purpose
 <ul>
  <li>
   Develop and maintain the architecture for the cybersecurity model, security design approach, baseline, and design roadmap. Support Cyber Security Head in enhancing and improving cybersecurity levels, while also identifying cyber security requirements and standards across the entire Company.
  </li>
 </ul>
 Job Context &amp; Major Challenge(s)
 <ul>
  <li>
   Major challenges are:
   <br/>
   1) Operating in a complex technical environment containing interfaces with multiple internal and external stakeholders.
   <br/>
   2) Contributing to other multi-disciplinary tasks whilst providing expertise in specialised area (Design and Architectures).
   <br/>
   3) Supporting and assisting frequent shareholders audits and cold eye reviews and closes all findings and gaps in timely manner.
   <br/>
   4) Contributing to the ongoing continuous improvement due to the current maturity level and the changing IT and OT landscape and the push towards a safe and secure Digital transformation.
   <br/>
   5) Understanding of the technology landscape of major vendors for the next 5 years.
  </li>
 </ul>
 Key Job Accountabilities
 <ul>
  <li>
   Provide authoritative advice and guidance on security strategies and roadmaps to manage identified risks and ensure adoption, and adherence to standards.
  </li>
  <li>
   Provide advice on the application and operation of all types of security controls, including legislative and regulatory requirements such as data protection, general data protection regulation (GDPR) and software copyright law.
  </li>
  <li>
   Plan, study, and design a resistant security architecture for the various IT and OT projects including but not limited to security requirements/blueprints for all assets/services.
  </li>
  <li>
   Provide technical and tactical guidance and supervision to other teams within and outside the IRM unit.
  </li>
  <li>
   Ensure that all IT/OT services and technologies are reviewed and approved prior to installation in alignment with the requirements published and to properly document any deviations.
  </li>
  <li>
   Develop and integrate cybersecurity designs for all systems and services with multilevel security requirements of processing multiple classification of data in both IT/OT environments.
  </li>
  <li>
   Document and address organization&rsquo;s information and cybersecurity architecture requirements throughout project life cycle and in alignment with the enterprise architecture processes.
  </li>
 </ul>
 <strong>
  Person Specification - Minimum Requirement
 </strong>
 Qualifications
 <ul>
  <li>
   Bachelor&rsquo;s degree in information security, computer science or computer engineering.
  </li>
  <li>
   Professional certification in information security management and standards (e.g., CISSP, CISA, GIAC, ISO27001, etc.).
  </li>
 </ul>
 Knowledge and/or Experience
 <ul>
  <li>
   9 years&rsquo; information security experience.
  </li>
  <li>
   OT related engineering experience in oil and gas sector.
  </li>
  <li>
   Knowledge and experience of solid design principles and secure architecture standards.
  </li>
  <li>
   Conversant with relevant information security national and international standards.
  </li>
  <li>
   Advanced knowledge of security and security protocols.
  </li>
  <li>
   Effective communication, analytical, leadership, teamwork, and problem-solving skills to provide business units with the right tools.
  </li>
  <li>
   Expertise in designing secure networks, systems, and architecture.
  </li>
  <li>
   Up-to-date knowledge of technological opportunities and trends.
  </li>
 </ul>
 Technical and Business Skills
 <ul>
  <li>
   Ability to assess and evaluate risk and the impact of legislation, and actively promotes compliance.
  </li>
  <li>
   Possesses a comprehensive understanding of IT business applications.
  </li>
  <li>
   Effective and persuasive in both written and oral communication.
  </li>
 </ul>
</div>


Cyber Security IT/OT Architect

QatarEnergy

<div></div><div><p><b>Job Posting Date: </b>15 Oct 2025
</p><p><b>Work Location:</b> Doha, QA
</p><p><b>Company: </b>QatarEnergy LNG
</p><div><div><div><div><h2 class="jobSectionHeader"><b>Job Specification</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Job Purpose</b></h2>
</div><div><ul><li>Develop and maintain the architecture for the cybersecurity model, security design approach, baseline, and design roadmap. Support Cyber Security Head in enhancing and improving cybersecurity levels, while also identifying cyber security requirements and standards across the entire Company.
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>Job Context &amp; Major Challenge(s)
</b></h2></div><div><ul><li>Major challenges are:
<br>
1) Operating in a complex technical environment containing interfaces with multiple internal and external stakeholders.
<br>
2) Contributing to other multi-disciplinary tasks whilst providing expertise in specialised area (Design and Architectures).
<br>
3) Supporting and assisting frequent shareholders audits and cold eye reviews and closes all findings and gaps in timely manner.
<br>
4) Contributing to the ongoing continuous improvement due to the current maturity level and the changing IT and OT landscape and the push towards a safe and secure Digital transformation.
<br>
5) Understanding of the technology landscape of major vendors for the next 5 years.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Key Job Accountabilities
</b></h2></div><div><ul><li>Provide authoritative advice and guidance on security strategies and roadmaps to manage identified risks and ensure adoption, and adherence to standards.</li>
<li>Provide advice on the application and operation of all types of security controls, including legislative and regulatory requirements such as data protection, general data protection regulation (GDPR) and software copyright law.</li>
<li>Plan, study, and design a resistant security architecture for the various IT and OT projects including but not limited to security requirements/blueprints for all assets/services.</li>
<li>Provide technical and tactical guidance and supervision to other teams within and outside the IRM unit.</li>
<li>Ensure that all IT/OT services and technologies are reviewed and approved prior to installation in alignment with the requirements published and to properly document any deviations.</li>
<li>Develop and integrate cybersecurity designs for all systems and services with multilevel security requirements of processing multiple classification of data in both IT/OT environments.</li>
<li>Document and address organization&rsquo;s information and cybersecurity architecture requirements throughout project life cycle and in alignment with the enterprise architecture processes.</li>
</ul></div></div><div><div><h2 class="jobSectionHeader"><b>Person Specification - Minimum Requirement</b></h2>
</div></div><div></div><div><div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
</div><div><ul><li>Bachelor&rsquo;s degree in information security, computer science or computer engineering.</li>
<li>Professional certification in information security management and standards (e.g., CISSP, CISA, GIAC, ISO27001, etc.).
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>Knowledge and/or Experience</b></h2>
</div><div><ul><li>9 years&rsquo; information security experience.</li>
<li>OT related engineering experience in oil and gas sector.</li>
<li>Knowledge and experience of solid design principles and secure architecture standards.</li>
<li>Conversant with relevant information security national and international standards.</li>
<li>Advanced knowledge of security and security protocols.</li>
<li>Effective communication, analytical, leadership, teamwork, and problem-solving skills to provide business units with the right tools.</li>
<li>Expertise in designing secure networks, systems, and architecture.</li>
<li>Up-to-date knowledge of technological opportunities and trends.
</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>Technical and Business Skills</b></h2>
</div><div><ul><li>Ability to assess and evaluate risk and the impact of legislation, and actively promotes compliance.
</li><li>Possesses a comprehensive understanding of IT business applications.
</li><li>Effective and persuasive in both written and oral communication.</li></ul></div></div></div></div></div><p></p>

Zong CMPak Ltd

<div>
 <p>
  <strong>
   <u>
    Job Purpose:
   </u>
  </strong>
 </p>
 <p>
  The
  <strong>
   Manager / Senior Manager, Information Security &ndash; Governance &amp; Architecture
  </strong>
  is responsible for shaping and driving the organization&rsquo;s Cybersecurity governance, risk, compliance, and enterprise security architecture. The role ensures that policies, controls, and security designs are aligned with international standards (ISO, PCI DSS, CIS, NIST) and local regulatory requirements (PTA CTDISR, Pakistan Cloud First Policy, etc.)
 </p>
 <p>
  This position plays a critical role in enabling secure digital transformation by embedding Cybersecurity by-design into technology initiatives, while also ensuring the organization&rsquo;s risk posture is well-governed and resilient against evolving threats.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    Key Responsibilities
   </u>
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Cybersecurity Governance, Risk &amp; Compliance (GRC)
  </strong>
 </p>
 <p>
  &bull;Lead the Cybersecurity governance framework, ensuring alignment with global standards (ISO 27001, PCI DSS, CIS, NIST CSF) and local telecom/digital &amp; Cloud regulatory requirements (PTA CTDISR, Pakistan Cloud First Policy, etc.).
 </p>
 <p>
  &bull; Develop, maintain, and enforce Cybersecurity policies, standards, and control frameworks.
 </p>
 <p>
  &bull; Drive organization-wide cyber risk assessments and ensure mitigation plans are embedded into business and Technology strategies.
 </p>
 <p>
  &bull; Oversee internal and external vulnerability assessments, penetration testing, and business risk reviews for critical applications and infrastructure.
 </p>
 <p>
  &bull; Act as the primary liaison with internal and external auditors, regulators, and compliance bodies.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Security Architecture &amp; Strategy
  </strong>
 </p>
 <p>
  &bull;Translate business strategies and digital initiatives into Cybersecurity architecture requirements and secure solutions.
 </p>
 <p>
  &bull; Plan and sign off on security design reviews for projects and system implementations.
 </p>
 <p>
  &bull; Recommend and validate security controls to protect critical applications, networks, and cloud platforms.
 </p>
 <p>
  &bull; Define phased strategies to achieve Cybersecurity risk and compliance objectives within deadlines.
 </p>
 <p>
  &bull; Provide expert advice on emerging cyber threats, vulnerabilities, and security technologies, ensuring the enterprise architecture remains robust and resilient.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Leadership &amp; Collaboration
  </strong>
 </p>
 <p>
  &bull; Collaborate with IT, Digital Technology &amp; Engineering Technology teams to ensure Cybersecurity-by-design principles are embedded in new solutions.
 </p>
 <p>
  &bull; Work closely with the SOC Operations team to ensure that governance, architecture, and controls effectively support threat monitoring, incident detection, and response.
 </p>
 <p>
  &bull; Develop cross-functional capabilities, including cyber awareness, governance best practices, and lifecycle information management standards.
 </p>
 <p>
  &bull; Inspire, influence, and engage senior stakeholders to make informed decisions on Cybersecurity risks and investments.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Education:
  </strong>
 </p>
 <ul>
  <li>
   Minimum Experience: 4 yrs. or Above
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Experience:
  </strong>
 </p>
 <ul>
  <li>
   Minimum of Bachelors degree preferably in IS, Computer Science etc. with relevant experience of IS.
  </li>
  <li>
   Preferred skills: Proven Skills of Data Protection &amp; Privacy to ensure the Confidentiality &amp; Integrity of Subscriber Data.
  </li>
  <li>
   Familiarity with Cloud, 5G, IOT, DevOps, Artificial Intelligence (AI) and Critical Infrastructure Security challenges.
  </li>
  <li>
   Industry Cybersecurity certifications like CISSP, CCSP, CRISC, ISO27001, OSCP would be preferred.
  </li>
 </ul>
</div>


Manager / Sr. Manager Information Security Governance & Architecture

Search 10000+ Information security architect jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 information security architect jobs NEAR_ME

Cybersecurity Solution Architect

Infrastructure Security Architect

Cybersecurity Architect

Senior Cloud Solution Architect - Data Security

Cyber Security IT/OT Architect

Cyber Security IT/OT Architect

Manager / Sr. Manager Information Security Governance & Architecture