✨ AI Summary
The Senior Architect - Information Security role at the Roads and Transport Authority in Dubai requires defining enterprise security architecture and control baselines across the SDLC, embedding security requirements, and incorporating threat-modeling outcomes. The position involves establishing and maintaining corporate information-security policies, standards, and ISMS design patterns aligned with regulations and best practices, ensuring secure cloud and on-premises baselines. The role requires maintaining risk-driven reference architectures, performing technology-risk assessments, and proposing compensating controls. Responsibilities also include representing Information Security in enterprise architecture boards and technical steering committees, providing specialist security input to RFPs, and leading architectural reviews for new digital initiatives with a focus on security by design.
The ideal candidate will possess a Bachelor's or Master's degree in Computer Science, Information Technology, or Cybersecurity, with 6+ years of experience (Master's) or 8+ years (Bachelor's). Key competencies include a strong understanding of Cybersecurity & Information Risk Management, Governance, Risk & Excellence Programs, Project Management, Quality Management and Enhancement, Security Architecture & Infrastructure Governance, Access Governance & Data Classification, Security Audit & Assurance, Security Compliance Inspection & Audit, and AI-Driven Security Engineering & Simulation. This is a permanent, full-time position for a UAE National.
Requirements
Bachelor's or Master's degree in Computer Science, Information Technology, or Cybersecurity. 6+ years of experience with a Master's degree or 8+ years with a Bachelor's degree in Information Security. Required competencies include Cybersecurity & Information Risk Management, Governance, Risk & Excellence Programs, Project Management, Quality Management and Enhancement, Security Architecture & Infrastructure Governance, Access Governance & Data Classification, Security Audit & Assurance, Security Compliance Inspection & Audit, and AI-Driven Security Engineering & Simulation.
Description
Roles and Responsibilities:StrategyDefine the enterprise security architecture and control baseline across the SDLC to reflect risk-management objectives, embedding security requirements in high-level designs and incorporating threat-modelling outcomes.Establish and maintain corporate information-security policies, standards, guidelines, and ISMS design patterns aligned to regulations and best practices, ensuring designs meet cloud and on-premises security baselines.Maintain risk-driven reference architectures and response scenarios; perform technology-risk assessments early in initiatives, highlight design-related risks/changes, and propose compensating controls.Set Authority security programs and technical standards with Enterprise Architecture; ensure projects align to architectural requirements through early design signoffs with business/ technology stakeholders.Define and govern secure integration patterns for third-party systems and APIs and ensure adherence during design and change.Evaluate emerging security technologies and trends; research solutions for mandated requirements and recommend adoption paths aligned to RTA strategy and architecture.Represent Information Security in enterprise architecture boards and technical steering committees to embed security perspectives in portfolio decisions.OperationsProvide specialist security input to RFPs; define and review security requirements and compliance language.Evaluate and approve changes per ITIL; improve change-management procedures and perform post-implementation audits.Lead architectural reviews for all new digital initiatives and ensure security by design across solutions and platforms.Define and govern secure integration patterns for third-party systems and APIs and ensure adherence during design and change.• Coordinate with the Security Operations Center on incident analysis and response, applying lessons to strengthen architectural controls.Lead/advise on IAM, SSO, classification, DLP, SIEM and related platform architectures; verify configuration hardening.Conduct and guide security assessments and vulnerability analysis; recommend and oversee mitigation actions.Coordinate information-systems audits with stakeholders to assess control effectiveness and drive remediation.Product/Process Improvement Develop and update security-architecture practices and standards, document target states, gaps, and migration roadmaps.Develop and maintain security policies, SOPs, and architecture documentation; report compliance metrics and audit artifacts; supervise and refine security training.Job Qualifications & Requirements Education Bachelor's degree/ master's degree in computer science (CS)/ Information Technology (IT)/ Cybersecurity or related.Experience 6+ Years in case of master's degree (8+ years in case of bachelor's degree).Required Competencies Technical CompetenciesCybersecurity & Information Risk ManagementGovernance, Risk & Excellence ProgramsProject ManagementQuality Management and EnhancementSecurity Architecture & Infrastructure GovernanceAccess Governance & Data ClassificationSecurity Audit & AssuranceSecurity Compliance Inspection & AuditAI-Driven Security Engineering & Simulation