Senior Security Architect

Job Description

Job Description:

The Enabling Services SR Security Architect is responsible for defining, governing, and evolving security standards and reference architectures across Enabling Services, aligned with the Mars Cybersecurity Framework.

This role ensures a consistent, risk-based, and secure-by-design approach across cloud, network, data protection, SRE, and infrastructure domains, enabling secure digital transformation and regulatory compliance.

Key Responsibilities:

1. Security Governance & Strategy

• Define and maintain security standards, policies, and guardrails.

• Establish governance models (roles, responsibilities, accountability).

• Align cloud, network, and SRE security with enterprise risk management.

• Ensure compliance with regulatory and industry frameworks.

2. Risk & Asset Management

• Define standards for asset inventory, data classification, and Zero Trust architecture.

• Lead threat modeling and risk assessments.

• Establish risk identification, prioritization, and third-party risk practices.

3. Security Architecture

• Design and govern secure reference architectures across:

  • Cloud, network, and infrastructure

  • IAM, encryption, and key management

• Define baseline security controls (multi-cloud, hybrid environments).

• Enforce principles such as least privilege, defense-in-depth, and zero trust.

4. Monitoring & Detection

• Define requirements for logging, monitoring, and SIEM integration.

• Establish standards for log collection, retention, and threat detection use cases.

• Promote adoption of cloud-native observability and security tools.

5. Incident Response & Resilience

• Define incident response frameworks and playbooks in collaboration with SecOps.

• Ensure integration with SOC/SOAR capabilities.

• Support recovery and resilience strategies.

6. Security Assurance & Compliance

• Define and enforce security control frameworks and baselines.

• Support audits and compliance assessments.

• Enable continuous compliance monitoring.

7. DevSecOps & Automation

• Embed security into CI/CD pipelines (SAST, DAST, SCA).

• Promote Infrastructure-as-Code (IaC) security and policy-as-code.

• Drive security automation and standardized controls.

Key Deliverables

• Security standards and policies

• Reference architectures and guardrails

• Cloud and infrastructure security baselines

• Control frameworks and mappings (e.g., NIST CSF)

• Risk assessment frameworks

Skills & Expertise

• Cloud (AWS, Azure, GCP), Network Security, Infrastructure, Backup & DR

• Observability (Azure Monitor, Datadog), SIEM/SOAR

• NIST CSF, NIST 800-53, CIS, ISO 27001

• DevSecOps, IaC, automation, and SRE practices

• Strategic thinking and strong architecture mindset

• Stakeholder management and communication

• Ability to translate risk into actionable standards

#TBdigital

#hybrid