Security Architect - Compliance & Risk Management - TJ / 1911416

Our client, MCB, is seeking a Security Architect specializing in Compliance and Risk Management based in Lahore. This role is pivotal in protecting the organization’s IT infrastructure by designing, reviewing, and ensuring the implementation of secure architectures. The Security Architect will lead a team of five professionals, coordinating efforts across various departments to assess and enhance the security posture at all technology layers. The position demands strong expertise in security compliance, governance, risk management, and regulatory adherence to safeguard sensitive information and maintain system integrity. The architect will also align stakeholder interests through clear reporting and strategic recommendations aimed at strengthening overall security resilience.

Key Responsibilities

- Lead the design and review of secure IT system architectures to ensure compliance with security policies and regulatory requirements.
- Manage and mentor a team of five security professionals, promoting collaboration and professional development.
- Develop and implement security review processes, including secure coding practices, vulnerability assessments, and threat modeling.
- Evaluate system hardening techniques and enforce secure configuration standards to bolster the organization’s security posture.
- Oversee the deployment and effective use of security tools such as API gateways, Web Application Firewalls, and other protective technologies.
- Ensure adherence to established security frameworks and benchmarks, including CIS Benchmarks and OWASP guidelines.
- Collaborate with stakeholders across business units to communicate security risks, compliance status, and mitigation strategies.
- Monitor security metrics and prepare comprehensive reports for senior management to support strategic decision-making.
- Analyze complex security threats, assess their impact, and provide actionable recommendations to reduce risk exposure.
- Stay updated on evolving security trends, regulatory changes, and emerging threats to continually improve security architecture.
- Drive continuous improvement initiatives within the security review function to optimize risk management and operational efficiency.
- Facilitate training sessions and knowledge sharing to enhance security awareness throughout the organization.

Required Qualifications

- Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field.
- Extensive knowledge of industry standards and best practices, demonstrated through certifications such as CISSP, ISSAP, ISSEP, CSSLP, or OSCP.
- Hands-on experience in secure coding, vulnerability management, threat modeling, and secure systems configuration.
- Strong leadership and project management skills with the ability to guide a team and manage cross-functional collaboration.

Preferred Qualifications

- Master’s degree in Cybersecurity or a related discipline is highly preferred.

This role offers the opportunity to work in a dynamic environment where security architecture plays a critical role in protecting organizational assets. The successful candidate will be instrumental in shaping the security framework and ensuring compliance with regulatory requirements while fostering a culture of security awareness across the organization.