Cybersecurity Architect

Job Purpose

To protect CGC's computer systems, networks, and data from cyber threats by designing, implementing, and maintaining security measures. They proactively defend against threats, assess vulnerabilities, and respond to security incidents to prevent data breaches and system compromise.

ACCOUNTIBILITIES

•    Develop and maintain the enterprise Cybersecurity Architecture framework.
•    Define and maintain security architecture principles, standards, and design patterns.
•    Oversight the implementation of security tools, and ensuring systems are resilient against cyber threats.
•    monitoring and upgrading the appropriate security measures and controls for the protection of the CGC’s networks, data, and systems against potential threats from cyberspace adversaries.
•    Ensure security-by-design principles are embedded throughout the system development lifecycle.
•    Review and approve security architecture for new systems, applications, cloud services, and infrastructure projects.
•    Develop target-state cybersecurity architecture aligned with the Technology Roadmap.
•    Assess cybersecurity technologies and recommend appropriate security solutions.
•    Participate in RFP/RFI technical evaluations.
•    Review product security capabilities and integration requirements.
•    Troubleshooting security and network issues and incidents.
•    Responding to all security breaches to the network and associated systems.
•    Appropriately respond to security breaches, incidents, and investigate how they occurred.
•    Performing technical security assessments, design reviews, and code audits.
•    Managing audits, intrusion, and security technology systems.
•    Constantly strive to find vulnerabilities in hardware, software, and applications
•    conducting regular penetration testing.
•    Developing solutions to help neutralize security vulnerabilities.
•    Research to identify attack vectors against the company.
•    Analyzing and improving the scalability, efficiency, and stability of systems.
•    Undertaking offensive security exercises.
•    Data Discovery, Governance, and Mobility Management.
•    Coding using various coding languages and conducting code reviews.
•    Identifying security requirements for assigned products, codebases, or systems.
•    Report to the CISO & Cybersecurity committee members on potential proposed improvements and ongoing security issues.
•    Collaborating and coordinating with other teams to establish security protocols across the organization.
•    Work alongside associated stakeholders to ensure optimum security levels at all times.
•    Daily administrative tasks, reporting, and communication with the relevant departments in CGC.
•    Working with IT on ITIL processes, including change management and service management, to ensure information security aspects are covered.

Position Requirements

• B.S. in Computer Science or a related field.
• CISSP, CompTIA’s pentest+, GIAC Defensible Security Architect Certification (GDSA) or equivalent, MBA (Preferrable)
• A minimum of 10+ years of experience in Information Security and IT Infrastructure, including at least 3 years in cybersecurity architecture, security solution design, or
• Enterprise security engineering within regulated environments.
• Experience in security systems & tools.    
• Good level of English