Senior Security Architect

About the role

An experienced Senior Security Architect is sought to lead security architecture across a complex ICT transformation programme in a government environment. The role embeds security, privacy, risk management and governance requirements into solution design and delivery, develops and maintains security architecture standards and reference architectures, and provides expert guidance across cloud platforms, enterprise applications, data and analytics environments.

Key responsibilities

• Lead security architecture activities so that security, privacy and governance requirements are embedded across solution designs and delivery outcomes.
• Develop and maintain security architecture principles, standards, patterns and reference architectures aligned with government policy and industry best practice.
• Provide security architecture leadership across Microsoft Azure, Microsoft 365, Dynamics 365, Power Platform, Databricks, integration platforms and enterprise data and analytics environments.
• Collaborate with enterprise, solution and data/AI architects to integrate security requirements across architecture domains.
• Lead security design reviews, architecture assurance, threat modelling workshops and technical risk assessments.
• Define and govern security controls covering identity and access management, privileged access, information protection, encryption, monitoring, auditing and incident response.
• Advise on information privacy, classification, information sharing, records management, data retention and security governance.
• Lead security assurance, accreditation and compliance activities, including IRAP engagements, remediation planning, control validation and audit readiness.
• Maintain security architecture artefacts, risk assessments, control mappings, architecture decisions, standards and governance documentation.
• Advise executives, project teams, operational stakeholders and vendors on cyber security risks, compliance obligations and secure solution design.

Required profile

• Demonstrated experience in security architecture, cyber security, enterprise architecture or related technology leadership roles in complex enterprise environments.
• Proven experience delivering security architecture and governance outcomes for large-scale cloud, digital transformation, data and integration programmes.
• Strong hands-on knowledge of Microsoft Azure security services, Microsoft Entra ID, Microsoft 365 Security, Microsoft Defender and Microsoft Purview.
• Experience with Dynamics 365 security, Power Platform governance and security, Azure networking and cloud security controls.
• Strong understanding of identity and access management, Zero Trust architecture, identity-centric security and cloud-native security controls.
• Demonstrated understanding of Queensland Government Enterprise Architecture (QGEA), Information Standard 18 (IS18), information classification frameworks and associated security governance obligations.
• Knowledge of Queensland's information privacy legislation, Information Privacy Principles, Privacy Impact Assessments and privacy-by-design approaches.
• Experience conducting security risk assessments, threat modelling, security assurance reviews and technology governance activities.
• Practical understanding of IRAP assessments, the ASD Essential Eight, ISO 27001 and other recognised security frameworks.
• Desirable: experience in government, regulatory, law enforcement, justice or health environments; experience leading security architecture across multidisciplinary teams; familiarity with Databricks; experience developing security reference models and standards; experience supporting accreditation, audit readiness and compliance remediation.

Confidential enquiries can be made through the recruiter named in the listing. A National Police Check may be required as part of pre-employment screening.