Director Cyber Security Architecture GCC

About the Role

Deloitte is seeking a Director Cyber Security Architecture GCC to join their team in Riyadh, Saudi Arabia. This full-time role involves leading complex security architecture engagements and contributing to the firm's impact for clients, people, and society. The Director will operate within a culture that values integrity, collaboration, and professional development.

Key Responsibilities

• Serve as a senior advisor to CISOs, CIOs, CTOs, Chief Architects, and risk leaders on enterprise security architecture and cyber resilience.
• Lead the development of enterprise security architecture strategies, target-state operating models, and investment plans.
• Conduct complex security architecture assessments across various technology estates, including cloud, on-premises, and hybrid environments.
• Lead the design and implementation of Zero Trust architectures across users, devices, networks, applications, and data.
• Establish and mature security architecture governance models, including architecture review boards and design authorities.
• Apply threat modeling and attack-path analysis to architecture decisions and design resilience into enterprise architectures.
• Advise on secure application architecture, API security, data security, and secure AI/GenAI adoption.
• Own end-to-end delivery of complex security architecture engagements, ensuring quality, timelines, and budget adherence.
• Contribute to business development by identifying opportunities, leading pursuit strategies, and developing differentiated offerings.
• Recruit, lead, mentor, and develop security architects and technical specialists within the practice.

Required Technical Expertise

• Proficiency in enterprise and solution architecture frameworks, including SABSA, TOGAF, NIST Cybersecurity Framework, and ISO 27001.
• Expertise in Zero Trust strategy, identity-centric access, micro-segmentation, and secure access service edge (SSE/SASE).
• Strong knowledge of Identity and Access Management (IAM), Privileged Access Management (PAM), federation, SSO, and MFA.
• Experience with cloud and hybrid architectures across AWS, Azure, and Google Cloud, including secure platform designs.
• Understanding of network security, application and API security, and data protection techniques (encryption, KMS/HSM, DLP).
• Familiarity with resilience and continuity planning, including business continuity, disaster recovery, and ransomware resilience.
• Knowledge of detection and response integration, security telemetry, SIEM, SOAR, and incident response.
• Awareness of emerging technologies such as AI/ML, GenAI security, IoT/OT security, containerization, and serverless architectures.

Qualifications and Experience

• 12+ years of progressive experience in cybersecurity, security architecture, enterprise architecture, technology risk, or consulting.
• 5+ years leading complex security architecture engagements or major security transformation initiatives.
• 3+ years in a Director, Senior Manager, or equivalent leadership role with responsibility for delivery, people, and commercial outcomes.
• Demonstrated experience advising large enterprise or regulated-sector clients at an executive level.
• Proven ability to lead architecture assessments, target-state design, governance models, and multi-year transformation roadmaps.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline; equivalent professional experience will be considered.

Preferred Certifications

• SABSA Chartered Architect (SCF/SCM) or equivalent security architecture certification.
• TOGAF certification.
• CISSP, CISSP-ISSAP, CCSP, CISM, CISA, or CRISC.
• Cloud architecture or security certifications across AWS, Azure, or Google Cloud.
• NIST, Zero Trust, enterprise resilience, or emerging technology security credentials.

Business Development Expectations

The Director will be accountable for building and maintaining a qualified pipeline aligned to annual revenue, growth, and profitability targets. This includes leading the pursuit of complex, high-value security architecture engagements, converting trusted-advisor relationships into repeat business, and developing compelling propositions that address client outcomes. The role also involves supporting account planning, cross-practice selling, and building the firm’s external market presence through publications, speaking engagements, and industry partnerships.