Lead Security Architect

About the Role

Hays is seeking an experienced Lead Security Architect to join a large-scale cybersecurity transformation and governance program within a leading financial services environment in Saudi Arabia. This contract role requires 5-10 years of experience and focuses on defining, governing, and advancing enterprise security architecture practices. The successful candidate will ensure alignment with business objectives, regulatory requirements, and industry best practices.

Key Responsibilities

• Lead and govern enterprise cybersecurity architecture initiatives.
• Conduct security architecture assessments and design reviews for strategic projects and platforms.
• Develop and maintain enterprise security reference architectures and architecture standards.
• Support Architecture Review Boards (ARB) and provide security guidance on technology initiatives.
• Create and maintain Architecture Decision Records (ADRs).
• Develop security architecture roadmaps aligned with business and security objectives.
• Define security architecture requirements across applications, infrastructure, cloud, networks, and data platforms.
• Perform security risk assessments and threat modeling activities.
• Evaluate solution architectures and recommend appropriate security controls and design improvements.
• Establish and maintain security baselines, standards, and hardening requirements.
• Collaborate with enterprise architects, infrastructure teams, cloud teams, application teams, and security stakeholders.
• Ensure compliance with applicable regulatory requirements and industry security frameworks.
• Support continuous improvement of cybersecurity architecture governance and operating models.

Required Experience and Qualifications

• 5-10 years of experience in security architecture.
• Experience within banking, financial services, government, or other highly regulated industries.
• Strong knowledge of cybersecurity frameworks and standards including ISO 27001, NIST Cybersecurity Framework, CIS Controls, and Cloud Security Best Practices.
• Experience supporting large-scale cybersecurity transformation programs.

Work Type and Location

This is a contract position based in Saudi Arabia, within a financial services environment. The role involves working as part of a significant cybersecurity transformation and governance program.