Job Description

Job Title : Application Security Architect ROLE PURPOSE : Analyse and design the Bank\'s application security reference architecture, produce design security baselines for implementation of IT security controls, and ensure effectiveness of the controls in the IT infrastructure and systems to safeguard the Bank\'s IT and application from internal and external security threats in maintaining confidentiality, integrity and availability of information assets in the Bank. INTERCHANGEABLE/FEEDER JOBS: Solution development, Architects, Application development and support/ project managers/ RSFG/ CSD teams or other line depts. with security infrastructure knowledge. PRINCIPAL ACCOUNTABILITIES : Assist in developing IT application security architecture model, governance and standards based on risk assessment, IT and business directions and strategies to support the Bank\'s desired outcomes by applying architecture principles to drive measurable results in mitigating security risk and in safeguarding the Bank\'s IT environment from internal and external security threats, and using of Key Performance Indicators (KPIs) and effectiveness metrics to improve IT security processes. Conduct continuous maintenance, monitoring and updates of the IT application security architecture model, governance, policies, standards and processes. This includes anticipating growth to ensure scalability, assessing the value of enhancement emanating from benchmarks, observations or other industry best practices and incorporate the changes, if required. Design and standardise the Bank\'s IT application security and services and provide direction in the implementation of new IT application security technology solutions to ensure alignment to the IT and business directions, strategies and optimisation of IT investments and compliance with IT policies, guidelines and procedures. Conduct research and environmental scanning of emerging internal and external threats, technology trends and directions in mitigating IT security risks, and perform evaluation by working collaboratively across IT department and functions to improve the IT application security infrastructure and services in the Bank in order to maintain confidentiality, integrity and availability of information assets in the Bank. Build and maintain strategic relationship/networking and collaborations with external IT security expert and other IT organisations in order to benchmark and improve the Bank\'s IT application security service delivery to the stakeholders. Provide IT security advisory services on IT application security solution architecture and design proposals to ensure solution meets the IT security requirements as to safeguard the Bank\'s IT infrastructure and systems Provide IT Threat Model for newly developed / implemented applications to ensure that any potential IT threats are designed, tracked, alerted and monitored by the Security Operations Centre Manage the lifecycle of IT application security and its related system solutions technology refresh with minimal impact to business operations and in compliance with the technology architecture design, standards and principles. CRITICAL SUCCESS FACTORS : Ability to keep abreast of IT security threats and understand the business impacts and recommend mitigation plans to address the IT Security risks. Response management processes and recovery plans for detecting, identifying, analysing and reporting of IT security-related events to ensure timely identification of threats and implementation of the proactive and corrective actions. CHALLENGES : Ability to manage IT security risks in the adoption of new technology (e.g. Cloud Services, BYOD) To balance the implementation of new business solutions with the needs to protect the Bank\'s information assets and to gain support from business users

foundit