Senior Cyber Security Architect

We are seeking a Senior Cyber Security Architect in Qatar to provide experienced security architecture capacity on a consulting basis, supporting architecture assessments, solution reviews, security design and documentation across applications, infrastructure, cloud, data, identity and emerging technologies. The role is advisory and delivery-focused, working under the direction and governance of the organisation's management, with knowledge transfer and reusable documentation as core outcomes. At least 10 years of cyber security experience, including enterprise security architecture in a highly regulated environment, and a senior-level security certification such as CISSP or CISM are mandatory for this position.

Key Responsibilities

Deliver assigned security architecture priorities and support stakeholders across the engagement

Perform security architecture assessments across on-premises, hybrid and multi-cloud environments, applications, APIs, platforms, networks, endpoints, data and third-party integrations

Propose designs aligned with Zero Trust principles, including strong identity, least privilege, continuous verification and explicit access decisions

Prepare security architecture requirements and design recommendations for IAM, PAM, secrets management, cryptography, key management, data protection, network security, endpoint security, application security and security monitoring

Assess emerging technologies, including generative AI and machine-learning solutions, and document data, model, identity, integration, misuse, third-party and regulatory risks with proposed safeguards

Recommend measures that support cyber resilience, including secure redundancy, recovery, immutable protection, segmentation, tested failover and incident containment

Identify and document architecture risks and control gaps, propose compensating controls and support remediation tracking

Apply approved, reusable and cost-effective security patterns, and provide evidence-based analysis of technology options including resilience, vendor dependency and total cost

Engage early with enterprise architects, project managers and technology teams to understand requirements, threat exposure and regulatory obligations

Develop and maintain reference designs, standards and reusable patterns, and produce complete deliverables, decision records and knowledge transfer materials in approved repositories

Transfer knowledge to designated personnel through documentation, walkthroughs, technical briefings and handover sessions

Compliance & Governance

Comply with all applicable laws, regulations, contractual obligations, policies and security requirements communicated for the engagement

Operate solely within the approved scope, access rights and instructions; architecture approval, risk acceptance and exceptions remain with authorised personnel

Immediately report security incidents, suspected data exposure, conflicts of interest, control breaches and material delivery risks through the designated channels

Complete all mandatory onboarding, security, privacy and compliance training before receiving or retaining access

Cooperate with audit, risk, compliance and regulatory evidence requests relating to the services performed

Maintain strict confidentiality of customer and internal information, and the professional certifications represented for the duration of the engagement

Mandatory Requirements

Bachelor's degree in cyber security, computer science, computer engineering, information systems or a related discipline; a postgraduate qualification is an advantage

At least 10 years of relevant technology and cyber security experience, including substantial enterprise security architecture experience in banking, financial services or another highly regulated environment

Demonstrated experience with hybrid and multi cloud architecture, Zero Trust, IAM/PAM, application and API security, data protection, network security and cyber resilience

CISSP, CISM or an equivalent senior level security certification is required; SABSA, TOGAF, CCSP or major cloud provider security certifications are advantageous

Required Skills

Expert knowledge of enterprise security architecture, threat modelling, security control design and risk based decision making

Strong understanding of cloud shared responsibility models, container and orchestration security, APIs, modern authentication, privileged access, encryption and key management

Working knowledge of AI security risks, data governance, model and integration controls, and responsible adoption of generative AI

Ability to translate complex technical risks into clear business, executive, audit and regulatory language

Strong stakeholder management, negotiation, facilitation, presentation and technical writing skills

Sound judgement, professional integrity, independence and the ability to challenge constructively

Excellent written and spoken English; Arabic is an advantage

Working Arrangement

Based in Qatar, working on site, remotely or in a hybrid arrangement as specified in the engagement terms; travel may be required where explicitly approved

The consultant may coordinate assigned activities and provide technical guidance, but has no line management authority and no authority to approve designs, accept risk or commit expenditure