Set the architecture and standards Define and maintain the cybersecurity reference architecture, design principles and reusable security patterns, and publish them as the standard projects must follow Write technical security standards for identity, network, cloud, endpoint, data protection and application security, mapped to NCA ECC, CCC, DCC and NIST SP 800-53 Design the zero trust target architecture and a phased path to reach it Assure new solutions Run security architecture reviews and design approvals for new projects, platforms and vendor solutions, and issue clear review reports with conditions Lead threat modelling for critical and guest-facing systems, focusing on the threats that matter rather than long generic lists Explain design trade-offs in plain terms to engineers, project managers and executives, and hold the line on risks that can't be accepted Design key security capabilities Design controls for identity and privileged access, network segmentation, secure remote access, encryption and key management, and cloud security posture Embed security into the SDLC and DevSecOps pipelines with engineering and AppSec teams Evaluate and select security technologies with practical proof-of-concept testing, and maintain the security technology roadmap Work across the programme Work with the Strategy team so the architecture supports the roadmap, and with OT Security on IT/OT boundaries Keep an up-to-date view of architecture risks and exceptions, and report them to governance Leadership Capabilities: Builds own understanding of our purpose and values; explores opportunities for impact. Demonstrates strong commitment to personal learning and development; acts as a brand ambassador to help attract top talent. Understands expectations and demonstrates personal accountability for keeping performance on track. Actively focuses on developing effective communication and relationship-building skills. Understands how their daily work contributes to the priorities of the team and the business.

Desired Candidate Profile

Years of experience: 6-10 total years Bachelor's in computer science, engineering or a related field Hands-on depth in at least two of: identity and access, network security, cloud security (Azure, AWS or GCP), application security Has produced security architectures or design reviews for real systems in production Working knowledge of NCA ECC, CCC and DCC, and NIST SP 800-53 Clear written and verbal English SABSA or TOGAF training or practice Zero trust design and implementation experience (NIST SP PHONE_NUMBER) Experience with large digital, hospitality, smart-city or critical-infrastructure environments Arabic Language is a bonus At least one preferred: CISSP (ISSAP a plus), SABSA, CCSP. Also valued: TOGAF, AZ-500 / SC-100, AWS Certified Security Specialty, CCSK. Frameworks Knowledge: NCA ECC-2:2024 NCA CCC NCA DCC NIST SP 800-53 Rev 5 NIST SP PHONE_NUMBER ISO/IEC 27001/27002:2022 SABSA TOGAF