Senior Application Architecture Analyst Job

About the Role

Elm Company is seeking a Senior Application Architecture Analyst to join our team in Riyadh. This full-time position is critical for ensuring technology solutions comply with cybersecurity requirements and standards by supporting cybersecurity architecture and configuration assurance activities. The role involves reviewing system and solution designs, assessing security configurations, and identifying architectural risks.

Core Responsibilities

The Senior Application Architecture Analyst will play a pivotal role in safeguarding Elm Company's technological landscape. This includes a broad range of activities from conducting detailed security reviews to supporting the integration of security principles throughout the development lifecycle.

• Conduct security architecture reviews for new and existing systems and solutions.
• Assess solution designs against established cybersecurity requirements and standards.
• Review system, infrastructure, and application configurations against approved security baselines.
• Identify configuration weaknesses, security gaps, and associated cybersecurity risks.
• Support stakeholders in implementing required configuration improvements and mitigation measures.

Security-by-Design and Risk Management

A key aspect of this role is to embed security early in the design process and manage architectural risks effectively.

• Support the incorporation of security requirements during solution design and implementation.
• Collaborate with technical teams to clarify security requirements and controls.
• Verify alignment with security-by-design principles throughout implementation activities.
• Identify and assess cybersecurity risks associated with proposed architectures and technical solutions.
• Evaluate existing security controls and identify potential gaps.

Technical Assessments and Compliance Support

The analyst will perform various technical security assessments and support compliance efforts, including those mandated by regulatory authorities.

• Assess infrastructure, cloud, and network designs against security requirements and best practices.
• Perform assigned technical security assessments required for solution approvals.
• Support security sign-off activities for systems and solutions.
• Support technical cybersecurity assessments conducted by regulatory authorities, including NCA-related assessments.
• Coordinate required technical evidence and documentation for assessments.

Documentation and Continuous Improvement

Maintaining accurate documentation and contributing to the evolution of security practices are integral to this role.

• Document security observations, recommended actions, and assessment results.
• Maintain assessment evidence and security review documentation.
• Maintain architecture security requirements, assessment records, and configuration standards.
• Monitor developments in architecture and cloud security practices.
• Contribute to improving architecture security assessment methods and controls.

Qualifications and General Requirements

Candidates for this position should possess a strong background in cybersecurity architecture and a commitment to maintaining high standards of security and compliance.

• A minimum of 5-10 years of relevant experience is required.
• Ability to follow all relevant departmental policies, processes, standard operating procedures, and instructions.
• Commitment to complying with all relevant safety, quality, and environmental management policies, procedures, and controls.
• Adherence to all relevant information security practices and standards to ensure data integrity and confidentiality.