IT Security Architect

IT Security Architect / Engineer

Job Title: IT Security Architect / Engineer
Start Date: ASAP
Location: Remote

Job Summary:

We are looking for an experienced IT Security Architect / Engineer to support the organization’s information security strategy during a business carve-out and Azure tenant separation program.

The role will be responsible for ensuring that security is embedded across transformation activities, establishing an independent security operating model and governance framework, and developing a security architecture that supports regulatory compliance, business objectives, and risk management requirements from Day 1.

Key Responsibilities

1. Information Security Strategy & Governance

* Define, maintain, and communicate the organization’s **information security strategy, policies, standards, and control framework.
* Establish and lead the Information Security Program in alignment with business objectives, regulatory obligations, and industry best practices.
* Obtain executive leadership approval for security initiatives and ensure continued alignment with the Board-approved risk appetite.
* Develop and maintain security governance structures, reporting mechanisms, and decision-making forums.
* Create and manage security policies, standards, procedures, and governance documentation.

2. Security Architecture & Azure Tenant Design

* Own the security architecture and design for the new Azure tenant environment.
* Define and implement identity and access management controls, Conditional Access policies, Privileged Access Management (PAM), and Zero Trust security principles.
* Ensure security requirements are embedded into the design and deployment of new platforms and services.
* Establish tenant security boundaries and governance controls to support secure business separation.
* Deliver a Day-1-ready security architecture that supports business operations immediately upon transition.

3. Carve-Out & Transformation Security

* Apply security-by-design principles throughout the carve-out and migration lifecycle.
* Review, challenge, and approve migration and transformation initiatives from a security risk perspective.
* Identify and remove inherited security dependencies on the source organization.
* Provide security oversight and assurance across technology workstreams involved in the separation program.
* Validate security controls before, during, and after migration activities.

4. Identity, Access & Tenant Security Governance

* Maintain governance over identity services, authentication mechanisms, access controls, and tenant security boundaries.
* Ensure appropriate segregation of duties and least-privilege access principles are implemented.
* Oversee secure identity management processes and privileged access controls.
* Govern user lifecycle management and access certification processes.

5. Security Operations & Incident Management

* Lead Security Operations Center (SOC) onboarding and operationalization activities.
* Establish security monitoring, detection, alerting, and response capabilities.
* Support the development of security operational processes required for the independent organization.
* Ensure security operations are aligned with the organization’s governance and risk management requirements.

Qualifications & Skills:

* Strong experience in information security strategy and governance.
* Experience with security architecture and Azure tenant environments.
* Strong understanding of Identity and Access Management (IAM).
* Experience with Conditional Access, Privileged Access Management, and Zero Trust security principles.
* Experience supporting business carve-outs, migrations, and technology transformation programs.
* Strong understanding of security-by-design principles and security risk assessment.
* Knowledge of identity lifecycle management, access certification, segregation of duties, and least-privilege access.
* Experience with Security Operations Center (SOC) onboarding and operationalization.
* Strong understanding of security monitoring, detection, alerting, and incident response.
* Knowledge of security policies, standards, procedures, governance frameworks, and control environments.
* Strong stakeholder management and communication skills.

Preferred Candidate

* Experienced in working within complex business transformation and separation programs.
* Strong ability to establish an independent security operating model and governance framework.
* Capable of translating business and transformation requirements into practical security architecture and controls.
* Strong risk-based approach to reviewing and governing technology initiatives.
* Comfortable working with executive leadership and cross-functional technology teams.
* Strong understanding of regulatory compliance, risk management, and security governance requirements.
* Able to work effectively in a remote environment.

Apply Now: recruitment@nesasoftware.com or 75938 33665