Head - Cyber Security Architecture
First seen by Alion on Oct 23, 2026.
Role & responsibilities :
- Lead the Security Architecture function and manage, mentor, and allocate a team of Security Architects across strategic programmes and technology initiatives.
- Own security architecture principles, standards, reference architectures, patterns, roadmaps, and exception governance.
- Ensure architecture decisions are converted into implemented controls with clear ownership, acceptance criteria, testing evidence, operational handover, and measurable outcomes.
- Lead the architecture and implementation governance of SIEM, WAF, Privileged Identity Management (PIM), Data Loss Prevention (DLP), email security, mobile application security, and other enterprise security capabilities.
- Establish and run security architecture review forums, design assurance, threat modelling, risk acceptance, and remediation tracking.
- Lead CTEM across scoping, discovery, prioritisation, validation, mobilisation, remediation governance, and executive reporting.
Preferred candidate profile :
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; a relevant master's degree is preferred.
- Minimum 12 years of progressive cybersecurity experience, including substantial responsibility in security architecture, security engineering, or enterprise security technology implementation.
- Demonstrated experience leading Security Architects or senior security engineering professionals in a complex enterprise environment.
- Proven delivery experience implementing and operationalising multiple enterprise security capabilities, including SIEM, WAF, PIM or PAM, DLP, email security, and mobile application security.
- Experience leading security architecture reviews, threat modelling, design assurance, technology selection, vendor evaluation, implementation governance, testing, and transition to operations.
- Hands-on understanding of CTEM, vulnerability management, attack-surface management, security control validation, penetration testing, and risk-based remediation governance.
Preferred Certifications :
- CISSP and/or ISSAP; SABSA; TOGAF; CCSP; CISM; GIAC architecture, cloud, incident response, or penetration-testing certifications; relevant cloud security certifications from Microsoft Azure, Amazon Web Services, or Google Cloud.
Skills
Security Architect, Information Security, Security, SIEM, Identity Management, WAF, Vulnerability Management, DLP, CyberArk PIM, CyberArk PAM