Head of Security and risk

About the role

We are seeking an experienced Head of Security Architecture & Innovations to lead the strategic design, implementation, and continuous evolution of our information security architecture. In this role, you will define the overall security architecture needed to safeguard core IT systems, applications, and cloud/hybrid infrastructure against emerging threats while ensuring alignment with overarching business goals and regulatory frameworks.

Key responsibilities

• Architect, implement, and maintain scalable security systems, secure infrastructure designs, and technical baselines based on information security roadmaps, risk assessments, and industry best practices

• Research and evaluate cutting-edge IT security architectures, cloud security tools, and technologies to mitigate emerging threats and drive continuous innovation across internal systems and third-party integrations

• Formulate, maintain, and enforce enterprise IT security policies, technical standards, and standard operating procedures for information processing environments, facilities, and vendor integrations

• Identify security design gaps in existing and proposed architectures, manage vulnerability assessments, and oversee security testing (including static/dynamic code analysis, penetration testing, and DR testing)

• Serve as the subject matter expert on security architecture to internal IT and development teams, evaluating business cases for security initiatives to balance operational performance with robust security controls

• Direct, mentor, and manage security officers and staff, ensuring effective allocation of resources, performance monitoring, and team development

About you

• Minimum 5+ years of dedicated experience in IT security, security architecture design, and IT security risk assessments within enterprise or financial environments

• Deep knowledge of network, server, database, application, and cloud security architecture (AWS, Azure, or GCP), including cryptography, authentication protocols (MFA, SSO, IAM), and dynamic/static code analysis

• Strong understanding of cloud security risks (APTs, data breaches, account hijacking, DoS) and the ability to proactively evaluate threat vectors to protect organizational assets

• Professional certifications such as CISSP, CEH, GIAC, GSEC, or equivalent are highly desirable

• Excellent leadership, project management, and conflict-resolution skills, with the ability to communicate complex security concepts clearly to technical and non-technical stakeholders alike