The Application Security Control Assessment Architect is responsible for designing and implementing comprehensive frameworks for assessing and enhancing application controls across the organization. This role ensures that critical applications are resilient to security threats by embedding strong controls into the architecture and aligning them with regulatory, compliance, and organizational standards. The Architect will play a key role in shaping the security posture of enterprise applications by guiding control development, conducting control gap assessments, and driving the adoption of secure application practices.
- Develop and apply methodologies for application control risk assessments.
- Architect solutions to mitigate application vulnerabilities and enhance resilience.
- Align application controls with regulatory requirements (e.g., PCI DSS, NIST 800-53, ISO 27001).
- Drive the development and execution of application control frameworks in collaboration with vendors.
- Design application control patterns to meet audit and compliance standards.
- Architect automated frameworks for continuous application control assessments.
- Develop assessment reports, and remediation plans along with stakeholders
- Provide regular reporting to line manager on control effectiveness and gaps.
- Develop and manage an annual self-assessment calendar to ensure application owners perform regular control assessments, track results, and drive remediation.
- Graduate/ Post Graduate degree in Science/ Engineering/ IT
- Minimum 1 Certifications in CISSP, CCSK, CCSP, Azure Security.
- Results oriented, high energy, self-motivated with excellent leadership and teamwork skills
- Experience instituting organizational change with respect to security
- Effective spoken and written communicator to multiple audiences
- 8+ years Information Security experience with minimum 5 years in managing Application control assessment, vulnerability and architecture designs
- In-depth Knowledge regulatory standards such as PCIDSS,NESA, RBI and International Compliance requirements
- Knowledge of threat modeling techniques to identify and address potential security threats.
- Strong analytical skills to assess security risks, conduct reviews, and evaluate compliance.
- Excellent verbal and written communication skills for interacting with stakeholders, preparing reports, and delivering presentations
- Should have good knowledge in various cloud platforms like Azure, AWS etc.,
الإبلاغ عن وظيفة
