Security Architecture Lead, FSI Environment

Role Summary

Our client in the financial services industry is looking for a Security Architecture Lead, this role reports to a CISO. The Security Architecture Lead is responsible for defining, governing, and driving the enterprise security architecture strategy — ensuring cybersecurity capabilities align with business objectives, technology transformation initiatives, and organisational risk appetite. This role establishes security architecture standards, reference architectures, and governance frameworks that enable the secure adoption of cloud, digital, and emerging technology platforms.

Acting as the principal security advisor for strategic initiatives, the Security Architecture Lead provides architecture oversight, technology risk assessments, and security-by-design guidance across enterprise programmes — driving the adoption of Zero Trust, Defense-in-Depth, and security automation capabilities to strengthen organisational resilience and cyber risk management.

Key Responsibilities

Enterprise Security Architecture

• Define and maintain enterprise security architecture strategy, principles, standards, and target-state roadmaps.
• Develop security reference architectures and reusable security patterns for business and technology initiatives.
• Ensure security architecture aligns with organisational risk management frameworks, regulatory requirements, and strategic objectives.
• Provide security architecture leadership for digital transformation, cloud adoption, modernisation, and emerging technology programmes.

Security Governance & Risk Management

• Conduct architecture reviews and technology risk assessments for enterprise projects and platforms.
• Identify security risks and recommend mitigating controls throughout the project lifecycle.
• Establish and maintain security standards, policies, controls, and governance frameworks.
• Partner with business, technology, risk, and compliance stakeholders to ensure effective risk management and regulatory compliance.

Cloud & Infrastructure Security

• Design and govern security architectures for cloud, infrastructure, network, endpoint, and identity platforms.
• Define security control baselines, hardening standards, and compliance requirements for enterprise environments.
• Evaluate security technologies and recommend solutions that enhance organisational security posture and operational effectiveness.
• Ensure secure integration of on-premises, cloud, and hybrid technology environments.

Application Security & DevSecOps

• Review application and solution architectures for compliance with secure design principles.
• Drive Security-by-Design practices across software development and digital transformation initiatives.
• Establish and promote secure development standards, DevSecOps capabilities, and application security controls.
• Oversee security testing, vulnerability management, and remediation activities across the software development lifecycle.

Security Innovation & Emerging Technologies

• Evaluate emerging technologies and security trends to identify opportunities and risks.
• Develop security architecture requirements and governance frameworks for AI, automation, and digital innovation initiatives.
• Promote adoption of modern security models, including Zero Trust Architecture and security automation.

Key Deliverables

• Enterprise security roadmaps and reference architectures
• Security architecture standards and governance frameworks
• Technology risk assessments and architecture design reviews
• Cloud and application security architectures
• DevSecOps frameworks and secure development standards
• Security control baselines and hardening standards
• AI and emerging technology security governance frameworks

Core Competencies

Enterprise Security Architecture · Cybersecurity Strategy · Security Governance · Technology Risk Management · Cloud Security · Application Security · DevSecOps · Infrastructure & Network Security · Zero Trust Architecture · Defense-in-Depth · Threat & Vulnerability Management · Security Automation · Identity & Access Management · Regulatory Compliance · AI Security & Emerging Technologies

Argyll Scott Asia is acting as an Employment Agency in relation to this vacancy.