Security Review Architect
MCB
Published Date: • Lahore, Pakistan (On-Site)
Description
The Security Review Architect at MCB plays a critical role in safeguarding the organization’s IT infrastructure by designing, reviewing, and ensuring the implementation of secure architectures. This position requires deep expertise in security compliance and governance, risk management, and regulatory adherence to protect sensitive information and maintain the integrity of systems. The architect leads a team of five professionals, coordinating cross-functional efforts to assess and improve security postures across all technology layers. This role focuses on aligning stakeholder interests through clear reporting and strategic recommendations to enhance overall security resilience. This role requires extensive knowledge of industry standards and best practices such as CISSP, ISSAP, ISSEP, CSSLP, or OSCP certifications, complemented by hands-on experience in secure coding, vulnerability management, threat modeling, and secure systems configuration. The Security Review Architect guides the implementation of security tools like API gateways, Web Application Firewalls, and compliance frameworks such as CIS Benchmarks and OWASP principles. With strong leadership and project management capabilities, the architect is responsible for monitoring security metrics, interpreting complex risks, and driving continuous improvements to meet regulatory and business requirements.
Education: Bachelor’s degree in Cybersecurity, Information Security, Information Technology, Computer Science, or a related field. Master’s degree in Cybersecurity or related discipline is highly preferred.
Responsibilities
- Lead the design and review of secure IT system architectures to ensure compliance with security policies and regulatory requirements.
- Manage and mentor a team of five security professionals, fostering collaboration and professional growth.
- Develop and implement security review processes, including secure coding practices, vulnerability assessments, and threat modeling activities.
- Evaluate system hardening methods and secure configuration standards to strengthen the organization’s security posture.
- Oversee deployment and utilization of security tools such as API gateways, Web Application Firewalls, and other protective technologies.
- Ensure adherence to security frameworks and benchmarks including CIS Benchmarks and OWASP guidelines.
- Collaborate with stakeholders across business units to communicate security risks, compliance status, and recommended mitigation strategies.
- Monitor security metrics and prepare detailed reports for senior management to inform strategic decisions.
- Analyze complex security threats, interpret their impact, and provide actionable recommendations to reduce risk exposure.
- Stay current with evolving security trends, regulatory changes, and emerging threats to continually enhance security architecture.
- Drive continuous improvement initiatives within the security review function to optimize risk management and operational effectiveness.
- Facilitate training sessions and knowledge sharing to promote security awareness across the organization.
Experience
4 Years
Apply By
Required Skills
- Security Compliance and Governance
- Security Architect Management
- Regulatory Compliance
- Risk Management of Security Architecture
- Stakeholder Management and Reporting
- Secure Coding Practices
- System hardening
- Secure Configurations
- API Gateways
Nice to Have Skills
- Project Management
- Security Metrics Monitoring
- Analytical thinking
- Decision Making