We are currently looking for an IT Security Architect with our client in the automotive industry.
Job Purpose

The main objective for the ISA is to review and evaluate Cybersecurity solutions that promote interoperability and manageability throughout the software development lifecycle (SDLC) while meeting company risk management needs and requirements. In addition, the ISA will be supporting the DEVOPS team to promote DevSecOps in order to build secure systems.

Qualification and Experience

• Bachelor’s or Master’s degree in Computer Science, Information Security, Information Systems, Computer Engineering, or a related field is required. Experience
• Minimum of 5 years of relevant work experience in cybersecurity architecture and engineering. Experience in building architectures and frameworks while applying cybersecurity principles. Experience in system and network planning and integration into proposed business solutions. Experience in threat modelling and security profiling evaluation for On-Premises and Cloud based systems.
• Consult on cloud assessments and project security planning.
• Derive Security requirements.
• Experience in developing and implementing physical and logical counter measures to identified security risks.
• Experience interacting with development teams to articulate requirements and processes while collaborating on architecture and engineering design options, implementation, testing and user acceptance.
• Experience identifying, evaluating and managing risk in a complex and changing environment.
• Experience discerning an organization’s security controls for information systems and networks based on vulnerabilities and business needs.
• At least one of the following certifications is required: CISSP, CCSP, CCSK, CCSLP, TPSSE, TISP, or MCSA.

Job Description

• The Job Requirements and Outputs
• The ISA will assess, design and maintain security architectures, solutions and technologies in a manner that promotes interoperability and manageability securely.
• Evaluate acquired or developed systems to ensure alignment with company cybersecurity strategy.
• Develop and provide implementation guidance to ensure enterprise components are properly integrated and aligned with global strategies, polices and standards. Conduct architecture meetings with relevant stakeholders as needed to collaborate on strategy and implementations.
• Assist in the creation of design documents for global and local driven initiatives.
• Identify and evaluate tools and techniques to capture, model and analyze security architecture options.
• Perform threat modelling and create/update security profiles for existing and to-be-developed systems.
• Maintain a consistent set of reference cyber architectures and their alignment to technical, service and business architectures as required.
• The ISA will be responsible for the analysis of cybersecurity solutions architecture in alignment with business needs, architectural principles, security protection, requirements and required functionality throughout the systems development life cycle and application/system life cycle.
• Ensure company standard security architecture reviews and testing is performed.
• The ISA is responsible for keeping abreast of the latest trends in cybersecurity architecture, threats, vulnerabilities and risk management.
• Systemically identify and document application-level vulnerabilities.
• Communicate identified vulnerabilities and recommended mitigation strategies.
• Provide guidance and recommendations for remediating application vulnerabilities
• Track and report on remediation status.
• Facilitate and deliver targeted application security training to the development team.
• Stay current on industry leading practices and technologies.
• Actively contribute to requests for input and feedback into global Security Operations, data protection and vulnerability management
For more information, please contact Pheliswa 011 234 0404, alternatively email your updated CV to pheliswa@esmartgroup.co.za