Our client is seeking a Medior Cybersecurity Architect to define, maintain, and operationalize architecture for security services and security solutions across the organization. The company is a leading global enterprise that leverages robust technology frameworks to ensure digital resilience, continuous risk management, and operational agility across its global footprint.
In this position, the candidate will translate security policy and principles into practical security design patterns, guardrails, and approval criteria that can be applied consistently across international regions and business units. Acting as a key security authority, the role is responsible for reviewing, challenging, and approving designs produced by Cloud & Infra, Applications, Data & Analytics, OT, and other cross-functional teams from a security perspective—ensuring full alignment with global security guardrails, standards, and risk decisions. This role does not own or replace the full architectural responsibility of domain teams; those specialized groups remain responsible for secure designs within their respective domains.
Operating at a Medior level, the ideal candidate will support architecture reviews, service catalog development, exception handling, and security design decisions, while working closely with a senior architecture counterpart during the transition period.
Key Responsibilities
- Define and maintain architecture for security services and security solutions across the organization.
- Develop practical security design patterns, standards interpretations and guardrails for regional and local execution.
- Document security architecture decisions, reusable patterns and design guidance in a clear and usable way.
- Review, challenge and approve designs submitted by Cloud & Infra, Applications, Data & Analytics, OT and other teams from a security perspective.
- Provide structured security feedback to improve alignment of peer-team designs with global security standards and guardrails.
- Prepare security architecture review materials and support Architecture Review Board decisions and follow-up actions.
- Contribute to the security service catalog and help define clear business, functional and technical ownership.
- Support governance of exceptions, compensating controls and remediation commitments.
- Help define and maintain security architecture KPIs and inputs for the central security dashboard.
- Work with Regional Security Delivery Specialists to enable knowledge transfer and practical security implementation guidance for business units.
- Build understanding of the company's global platforms, organization, priorities and delivery model to apply security guidance in a practical and business-relevant way.
- Align with the Enterprise Architect, CIO leadership and global IT functions on shared platforms and governance.
- Learn actively from a senior architecture counterpart during the transition period.
- Build deeper knowledge of internal security standards, architecture governance, business priorities and platform landscape.
- Continuously strengthen knowledge in security architecture, secure design principles and stakeholder management.
Requirements
- Bachelor's degree in Computer Science, Information Technology, Cyber Security or a related field. Equivalent experience may be considered.
- Certifications such as CISSP, CISM, CCSP, TOGAF, SABSA or relevant vendor certifications are an advantage.
- Around 3 to 5 years of relevant experience in security architecture, security engineering, security solution design or closely related technical roles across IT and Cloud. Experience with OT is an advantage.
- Experience translating security policies or standards into practical technical guardrails, patterns or implementation guidance.
- Experience reviewing technical designs from a security perspective in collaboration with infrastructure, application, data, analytics and engineering teams.
- Working knowledge of identity and access management, segmentation, secure remote access and privileged access concepts.
- Familiarity with exception handling, documentation and security governance processes.
- Prior internal experience within the group's IT department or a closely related technology role in a large enterprise setting is a strong advantage, as familiarity with complex organizational structures, key stakeholders, platforms, and operational workflows can help compensate for fewer years in a formal security architecture role.
- Experience supporting implementation teams with practical security guidance and knowledge transfer is an advantage.
- Able to translate security policy and principles into practical and implementable security guidance.
- Strong security review mindset and ability to assess peer-team designs objectively.
- Structured and clear in documentation, architecture artefacts and service ownership thinking.
- Good stakeholder engagement across global, regional and local teams.
- Able to work effectively with Cloud & Infra, Applications, Data & Analytics, OT and delivery teams without role overlap.
- Strong learning agility and willingness to grow into broader architecture accountability over time.
- Open to coaching, feedback and structured development during the transition period.
- English fluency is a must. Fluency in English at CEFR Level B2 is mandatory (both written and spoken), as the role requires daily collaboration with global, regional and local teams across the group.
- Disciplined, reliable and comfortable working in a governance-driven environment.
- Full-time global role with occasional travel.
- Location independent: the role can be based at any of the group's global hubs. The current preference is HCMC, Vietnam.
- Reporting line into the central CISO Office; close collaboration with a senior architecture counterpart during the transition period.
