Dubai Culture & Arts Authority seeks a Senior Information Security Architect to define enterprise security architecture, ISMS policies, and cloud/on-premises security baselines; lead architectural reviews, threat modelling, and risk assessments across the SDLC; and govern platforms such as IAM, SSO, DLP, and SIEM in coordination with the SOC.
Define the enterprise security architecture and control baseline across the SDLC to reflect risk-management objectives, embedding security requirements in high-level designs and incorporating threat-modelling outcomes.
Establish and maintain corporate information-security policies, standards, guidelines, and ISMS design patterns aligned to regulations and best practices, ensuring designs meet cloud and on-premises security baselines.
Maintain risk-driven reference architectures and response scenarios; perform technology-riskassessments early in initiatives, highlight design-related risks/changes, and propose compensating controls.
Set Authority security programs and technical standards with Enterprise Architecture; ensure projects align to architectural requirements through early design signoffs with business/technology stakeholders.
Evaluate emerging security technologies and trends; research solutions for mandated requirements and recommend adoption paths aligned to RTA strategy and architecture.
Represent Information Security in enterprise architecture boards and technical steering committees to embed security perspectives in portfolio decisions.
Operations
Provide specialist security input to RFPs; define and review security requirements and compliance language.
Evaluate and approve changes per ITIL; improve change-management procedures and perform post-implementation audits.
Lead architectural reviews for all new digital initiatives and ensure security by design across solutions and platforms.
Define and govern secure integration patterns for third-party systems and APIs and ensure adherence during design and change.
Coordinate with the Security Operations Center on incident analysis and response, applying lessons to strengthen architectural controls.
Lead/advise on IAM, SSO, classification, DLP, SIEM and related platform architectures; verify configuration hardening.
Conduct and guide security assessments and vulnerability analysis; recommend and oversee mitigation actions.
Coordinate information-systems audits with stakeholders to assess control effectiveness and drive remediation.
Product/Process Improvement
Develop and update security-architecture practices and standards, document target states,gaps, and migration roadmaps.
Develop and maintain security policies, SOPs, and architecture documentation; report compliance metrics and audit artifacts; supervise and refine security training.