Cybersecurity / Security Architect

About the Role

Jodayn is seeking a Cybersecurity / Security Architect to join their team in Riyadh, Saudi Arabia. This full-time role is responsible for defining and governing enterprise security architecture, ensuring that security, privacy, resilience, and regulatory requirements are integrated into business, application, data, technology, cloud, and solution architectures. The architect will develop security principles, reference architectures, standards, controls, and target-state designs, while providing architecture assurance for strategic initiatives and technology solutions.

Key Responsibilities

• Develop and maintain enterprise security architecture aligned with business strategy, enterprise architecture, cybersecurity strategy, and regulatory requirements.
• Assess current-state security architecture across applications, data, infrastructure, cloud, networks, identity, and integration environments.
• Define target-state security architecture and security transformation roadmaps.
• Develop security architecture principles, standards, patterns, reference architectures, and design guardrails.
• Embed security-by-design and privacy-by-design requirements across enterprise and solution architecture activities.
• Define Zero Trust architecture principles and implementation patterns across identity, devices, networks, applications, data, and workloads.
• Define identity and access management architecture, including authentication, authorization, privileged access, federation, and identity lifecycle controls.
• Define security architecture for cloud, hybrid, on-premises, SaaS, and externally hosted environments.
• Define network security architecture, including segmentation, secure connectivity, firewalls, gateways, remote access, and trust boundaries.
• Define application and API security architecture requirements across modern and legacy environments.
• Define data security architecture, including encryption, key management, data classification, data protection, and secure data exchange.
• Support threat modeling, architecture risk assessment, and identification of security gaps and mitigation measures.
• Review solution architectures and technical designs for compliance with enterprise security standards and control requirements.
• Collaborate with enterprise architects, solution architects, cloud architects, application teams, infrastructure teams, data teams, and cybersecurity operations.
• Support security technology evaluation, vendor assessment, technical due diligence, and architecture decisions.
• Participate in architecture governance, security design reviews, and Architecture Review Boards.
• Support alignment with applicable national cybersecurity controls, regulatory requirements, and recognized international security standards.

Required Experience and Qualifications

• Minimum of 8-10 years of experience in cybersecurity, information security, infrastructure security, cloud security, solution architecture, or related disciplines.
• At least 4-5 years of hands-on experience in Security Architecture or a comparable senior cybersecurity architecture role.
• Demonstrated experience designing enterprise-scale security architectures across multiple technology domains.
• Strong experience with identity, network, application, cloud, infrastructure, and data security architecture.
• Experience supporting large-scale digital transformation, cloud transformation, or cybersecurity improvement programs.
• Experience working with enterprise architecture teams, cybersecurity functions, technology teams, vendors, and senior stakeholders.

Personal Attributes

• Strong analytical and risk-based thinking.
• Ability to translate cybersecurity requirements into practical architecture controls and design decisions.
• Strong communication, facilitation, and stakeholder management skills.
• Ability to balance security, business value, usability, cost, and operational practicality.
• Strong attention to detail, architecture quality, and regulatory compliance.
• Consulting mindset with the ability to work across multiple stakeholders, programs, and technology domains.