Security Architect

1

Security Architect Consultant

Cluster Head Application Security Architecture

2

The Application Control Assessment Architect is responsible for designing and implementing comprehensive frameworks for assessing and enhancing application controls across the organization. This role ensures that critical applications are resilient to security threats by embedding strong controls into the architecture and aligning them with regulatory compliance and organizational standards. The Architect will play a key role in shaping the security posture of enterprise applications by guiding control development conducting control gap assessments and driving the adoption of secure application practices.

3

• Design and implement application control frameworks and secure architectural patterns.
• Develop and apply methodologies for application control risk assessments.
• Architect solutions to mitigate application vulnerabilities and enhance resilience.
• Align application controls with regulatory requirements (e.g. PCI DSS NIST 80053 ISO 27001.
• Drive the development and of application control frameworks in collaboration with vendors.
• Design application control patterns to meet audit and compliance standards.
• Architect automated frameworks for continuous application control assessments.
• Develop assessment reports and remediation plans along with stakeholders
• Provide regular reporting to line manager on control effectiveness and gaps.
• Develop and manage an annual selfassessment calendar to ensure application owners perform regular control assessments track results and drive remediation.

4

Operating Environment Framework and Boundaries Working Relationships

• Operate within established security frameworks policies and procedures to ensure consistent and compliant practices across all securityrelated activities.

• Navigate a complex and evolving IT environment integrating security measures across diverse systems and technologies while adapting to emerging threats and changes in regulations. Ensure that all security initiatives align with the organizations overall strategy and risk management objectives.
• strong working relationships with crossfunctional teams external vendors and senior management.
• Security frameworks such as NESA CIS NIST SOC2 ISO

5

• Ability to do issue analysis and root cause of all problems
• Ability to prepare root cause analysis and devise solutions for problem remediation.
• Implementation and effective change management for the new solution or corrective actions

• Deep understanding of the IS ecosystem to prepare business impact for all problems

6

• Develops and maintains key security metrics related to Vulnerabilities identified during assessment.
• Participates in Security Reference Architecture for Mashreqs IS platforms
• Ability to work with peers with minimal supervision
• Contributes on policy preparation regulation applicability scoping and control decision.

• Prepares Cybersecurity controls design for IS solutions

7

• Graduate/ Post Graduate degree in Science/ Engineering/ IT
• Minimum 1 Certifications in CISSP CCSK CCSP Azure Security.
• Results oriented high energy selfmotivated with excellent leadership and teamwork skills
• Experience instituting organizational change with respect to security
• Effective spoken and written communicator to multiple audiences
• 8 years Information Security experience with minimum 5 years in managing Application control assessment vulnerability and architecture designs
• Indepth knowledge of regulatory standards such as PCI DSS NESA RBI and international compliance requirements.
• Understanding of risk management principles and methodologies including risk assessment and mitigation strategies.
• Knowledge of threat modeling techniques to identify and address potential security threats.
• Strong analytical skills to assess security risks conduct reviews and evaluate compliance.
• Excellent verbal and written communication skills for interacting with stakeholders preparing reports and delivering presentations.
• Should have good knowledge in various cloud platforms like Azure AWS OCI.