An exciting opportunity has arisen for an experienced Security Solution Architect to join a major cyber security and technology uplift program within a highly regulated enterprise environment.

This role will play a key part in shaping secure technology solutions, translating cyber security requirements into practical architecture outcomes, and ensuring security controls are embedded throughout the delivery lifecycle.

• Extensive security architecture experience within complex enterprise environments.
• Proven experience supporting major technology transformation, cyber security uplift, cloud migration or remediation programs, including Secure-by-Design reviews and architecture assurance activities.
• Demonstrated ability to translate cyber security requirements, risks and control expectations into practical solution designs, architecture artefacts and implementation guidance.
• Strong knowledge across key security domains including cloud security, identity and access management, application security, network security, vulnerability management, data protection and operational resilience.
• Experience working with security and architecture frameworks such as ISO 27001, NIST CSF, CIS Controls, SABSA, TOGAF and associated governance practices.
• Exposure to regulated industries such as financial services, insurance, healthcare or other highly governed environments will be highly regarded, particularly experience with APRA CPS 234 and CPS 230.

• Develop and maintain security solution architecture artefacts including secure design patterns, architecture decision records, control mappings, risk assessments and implementation guidance.
• Partner with cyber security, enterprise architecture, delivery teams and business stakeholders to review solution designs, address security risks and ensure alignment to security standards and policies.
• Support remediation and uplift initiatives by assessing security findings, identifying control gaps, documenting solution approaches and providing assurance-ready evidence.
• Drive requirements traceability, governance reporting, audit readiness and architecture assurance activities across the program lifecycle.