Group Manager - Security Architect

My reputable client is expanding their security team, hiring for a talented security architect on their group level. If you are keen to know more, please get in touch!

About the job:

As part of the growing team, this new position will be instrumental in defining and enhancing the security posture for the Group, encompassing both cloud-based and on-premises infrastructures. This vital role will drive the integration of security best practices into the development lifecycle, and participate in the deployment of advanced security solutions.

About the responsibilities:

• Build, maintain, and enforce the Group's cloud security architecture, ensuring alignment with industry best practices and regulatory requirements
• Conduct regular security architecture reviews to pinpoint potential gaps and weaknesses, and assess the effectiveness of existing security measures. Recommend appropriate countermeasures, and monitor the improvement plans with operating companies
• Develop, maintain, and effectively communicate the cloud security policies, procedures, and guidelines across the Group
• Support the selection and implementation of emerging security technologies and cutting-edge security solutions, to assure proper protection of the organisation’s systems and data
• Provide regular reports on cloud security performance and risk exposure to senior management

About the requirements:

• A Bachelor’s degree or above, in Computer Science and Technology or equivalent
• 8 years+ experience in information security field, with at least 3 years in security architect or equivalent
• Professional certifications such as CISSP, CCSP, CCSK, and Azure/AWS/Alibaba/Google cloud certifications are preferred
• Expertise in cloud security principles, technologies, and best practices, with experience in using AWS, Azure, Alibaba Cloud or Google Cloud Platform
• Proven track record in evaluating and adopting security tools and technologies including firewalls, IDS/IPS, SIEM, IAM, EDR/XDR, CSPM, and SASE, etc.
• Strong understanding of cybersecurity frameworks and standard, e.g. NIST, ISO, CIS