Security Architect Job Requirements

Enterprise Security Architect's job description is similar to those of Security Engineer. A Security Architect designs, builds and oversees the implementation of security controls in an organization's IT infrastructure (e.g. networks, operating systems, databases and applications). They are usually part of all system development projects where they are expected to embed security controls at the design stages of system projects to prevent costly retrofitting of controls when the system is moved to production. Being an architectural function, a security architect is responsible for defining security requirements for all systems and IT infrastructure in use within an organization. They also define and gather security requirements for all system development or acquisition projects of an organization. With the gathered requirements, a security architect can roll out security baseline for all technologies, systems or IT infrastructure used or to be deployed within an organization. Some of the responsibilities of the Security Architect are not limited to researching security standards, frameworks, systems, technologies and protocols, develop requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, switches, databases, operating systems, design and integration of public key infrastructures (PKIs) into the organization systems including use of digital signatures and encryption technologies, design, implement and test security structures and methodologies for adoption, develop, implement and maintain security policies (physical security policy, password policy, IT security policy), involved in enterprise security awareness programs and training among others.

Reporting line of a Security Architect

A Security Architect could reports to the CISO or CIO.

Professional Certifications for Security Architect

To be endorsed as an Security Engineer, practitioners must acquire certification such as TOGAF (The Open Group Architecture Framework) certification, Certified Information Systems Security Professional (CISSP) by ISC2, Certified Ethical Hacker (CEH) by EC-Council.

Back To Information and Cyber Security Jobs

Back To Top IT Jobs of the 21 Century

Learn More About Our Valuable IT Audit Programs/Checklists

Learn More About Our Valuable Risk Assessment & Treatment Templates

IT Audit, IT Risk and Cyber Security eBooks

Auditing Your Information Systems and IT infrastructure: Practical Audit Programs/Checklists for Internal AuditorsGet Now
IT Infrastructure Risk & Vulnerability Library: A Consolidated Register of Operational & Technology Infrastructure Vulnerabilities for IT Assurance ProfessionalsGet Now
Auditing Your Payment Cards Processes, Systems and Applications: A Step By Step PCIDSS Compliance Audit Program For Brands, Issuers, Acquirers, ProcessorsGet Now
Auditing Your Windows Infrastructure, Intranet And Internet Security: A Practical Audit Program for Assurance ProfessionalsGet Now

Let us know your thoughts post. Leave a Comment below.