Principal Application Security Architect

2 weeks ago

Cape Town, South Africa Sanlam Full time

CAREER OPPORTUNITY

Santam BITS has a career opportunity for a senior role of Principal Application Security Architect in the Business Information and Technology Services (BITS) department which is based in the Western Cape or Gauteng.

KEY RESPONSIBILITIES

Driving a comprehensive application security strategy. Threat mitigation and risk management. Secure architecture and design. Vulnerability management and code reviews. Securing the development lifecycle. Collaboration and communication with development teams and other stakeholders. Protecting global assets. Understanding regional requirements. Lead the development and execution of application security assessments. Ensure applications comply with all relevant security standards and regulations. Champion a "security by design" culture. Develop and maintain application security documentation. Develop and manage risk mitigation strategies. Work with other security teams (e.g., security operations, etc.) Stay up-to-date on the latest application security threats and vulnerabilities. Application Security Incident Response and Cyber Crisis Management. Participate in Group Information Security Programme (GISP) initiatives. Application Security (including cloud security), Infrastructure Security, and Cybersecurity Education, Training and Awareness. Provide regular feedback to Santam Manco on Group-wide application security issues. Clear and timely communication to management and users regarding application security matters. Application Security Risk assessment that identifies a requirement for additional awareness or targeted education, training, and awareness interventions. Review and respond to all application security-related audit findings. Produce required application security reports. Ensure that security 'gates' are a formal part of the SDLC/ Agile/ relevant solution development methodology. Active participation in Sanlam-sanctioned industry bodies (e.g. ISF Live, ISACA, FS-ISAC) Timeous escalation of new, high or escalating cybersecurity risks. Engage with application owners and the Group Cyber Security Centre (GCSC) Operations Team to ensure that system vulnerabilities identified during penetration tests, Red Team exercises, or vulnerability scans are addressed. Ensure that the Group CIO is aware of risks and actions required. Find & provide root cause analysis and implement permanent and/or long-term fixes for application security-related incidents. Strong understanding of integration between Workstations and Network/Servers

QUALIFICATIONS AND EXPERIENCE

A bachelor’s Degree or Diploma in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent work experience. A Recognised Cyber Security Certification(s) (e.g., Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), or similar certification will be an advantage. With 15+ years of experience in software engineering, a significant portion of that in an architectural position focusing on cybersecurity within complex organisations, preferably in the financial services sector. The incumbent must have a solid technical software engineering background with a deep understanding of cybersecurity concepts, threats, and vulnerabilities.

COMPETENCIES

High Stress Tolerance. Building and maintaining relationships. Teamwork and ability to function independently. Facilitation Skills. Adaptability. Attention to detail. Planning and organising. Ability to work independently. Interpersonal savvy. Decision quality. Plans and aligns. Optimises work processes. Being resilient. Collaborates. Cultivates innovation. Customer focus. Drives results. Sensitivity to Risk Balances Stakeholders Reporting and Administration

ADDITIONAL COMPETENCIES AND SKILLS

Programming Languages: It is crucial to understand the security considerations of languages like Java, Python, C#, JavaScript and emerging ones like Kotlin. Web Technologies: Familiarity with HTML, CSS, JavaScript frameworks like React and Angular, and web application security concepts is essential. Mobile Development: Security expertise in Android, iOS, and cross-platform frameworks like Flutter helps secure sensitive data on user devices. Cloud Security: A deep grasp of cloud platforms like AWS, Azure, and GCP and their security implications is vital for secure cloud deployments. API Security: Understanding API security best practices is critical to prevent unauthorized access and data breaches. Vulnerability Understanding: In-depth knowledge of common and obscure vulnerabilities in various technologies allows for accurate identification and exploitation for testing and mitigation purposes. Secure Coding Practices: Expertise in secure coding principles and best practices for different languages and frameworks empowers proactive vulnerability prevention. Threat Modelling: The ability to analyse application architecture and functionality to anticipate potential attack vectors and proactively address them is crucial. Security Scanners and Code Analysis Tools: It is vital to understand how to use these tools to identify vulnerabilities in code and recommend remediation strategies. Penetration Testing Tools: Familiarity with these allows for thorough vulnerability assessment and simulating real-world attack scenarios. Security Incident Response Tools: Knowledge of incident response tools and methodologies helps them effectively handle security breaches and minimize damage. Cryptography and Encryption: Understanding encryption algorithms and their application in securing data is essential.

ADDITIONAL COMPETENCIES AND SKILLS

ABOUT THE COMPANY

Santam is the leading short-term insurer in South Africa. Along with its subsidiaries, the business transacts all classes of short-term insurance. Santam is a large, diversified, and transforming company and our success is rooted in our passion for our clients. Everything we do is centered on our delivery of Insurance Good and Proper. 

Please note this appointment will be made in line with the Divisional Employment Equity targets. People with disabilities are welcome to apply

  • Security Architect

    2 weeks ago

    Cape Town, South Africa A 1L Realization (Pty) Ltd Full time

    To own, analyse, architect, design and implement Platforms, Services and Systems regarding ALL IT and Cyber security aspects and security solutions in support of the organization. **Key Tasks & Accountabilities**: - **Architect Cyber Security solutions and any supporting infrastructure in alignment with organizational goals and constraints**: - Design and...

  • Security Architect Position

    7 days ago

    Cape Town, South Africa Outsource Business Management SA Full time

    Security Architect position - Budget: R 80 000 - 100 000 - Location: Stellenbosch - Hybrid model - 3 days in office - DevOps background is required and AWS experience and certifications would be ideal **1. POSITION DETAILS** Job Title Security Architect Division IT Department Cyber Security Reporting Manager (title) Manager: Information Security 2....

  • Security Architect

    7 days ago

    Cape Town, South Africa First Point Group Ltd Full time

    27582 Posted: 22/08/2023 - Negotiable- South Africa, Cape Town, South Africa South Africa Cape Town- Permanent- Role: Security Architect - Location: Cape Town - Join our client as a Security Architect: Shape the Future of Security Excellence - Are you ready to unleash your security prowess and redefine the future of security practices? As a Security...

  • Security Architect

    3 weeks ago

    Cape Town, South Africa Barratt and Co Full time

    As a Cyber-Security Solutions Architect, you'll work with our lead architect to ensure that our IT systems are protected against cyber-threats. You'll review our current security measures, recommend enhancements, and help implement them. You'll also stay up-to-date on industry trends and new threats to keep our systems safe. You'll be responsible for...

  • Cyber Security Architect

    7 days ago

    Cape Town, South Africa DataTech Recruitment Full time

    **Responsibilities** - Own, Analyse and Architect the Cyber Security architecture in line with capability maturity models and roadmaps. - Lead deep technical architecture discussions with senior customer executives, Enterprise Architects, IT Management and Developers to drive Cyber Security solutions. - Security Principles, IT Security procedures and Best...

  • Security Architect

    6 days ago

    Cape Town, South Africa ABC Worldwide (Pty) Ltd Full time

    **Security Architect** **Key Responsibilities** - Providing security advice, requirements and guidance to the business when delivering new systems or updates to existing, to ensure Security by design. - Performing security-focused risk assessment on new systems/services and changes to existing to ensure they are within risk tolerance. - Working with the...

  • Information Security Architect

    6 days ago

    Cape Town, South Africa Boardroom Appointments Full time

    **Key purpose**: **Duties and responsibilities**: - Create information security architectures and designs to secure enterprise information assets in line with architecture standards. - Serve as the primary Information Security architecture authority for all project and operational stakeholders, and ensure secure architecture across all solutions and...

  • Application Architect

    2 days ago

    Cape Town, South Africa ooba Full time

    As an Application Architect you will play a key role in the strategic business enablement team (SBE). You will have both a strategic and operational view of the architecture, defining and maintaining the strategic architecture blueprint and roadmap, as well as designing architecture for projects on an ongoing basis, always working towards the strategic view....

  • Security Solutions Architect

    7 hours ago

    Cape Town, South Africa Redherd Full time

    Our client is a South African based security vendor with a global reach and customers in the highest spheres of technology and innovation. They provide real-time reporting on adversaries interacting with your networks or snooping around your infrastructure, allowing you to identify and defend against attacks. They are extremely vested in the global security...

  • Cyber Security Architect

    1 day ago

    Cape Town, South Africa The Right Company Full time

    **CYBER SECURITY ARCHITECT (BANKING INDUSTRY) - STELLENBOSCH - R93000** **Experience**: - 8+ years’ experience in general programming - 2+ years’ general IT Architecture - 2+ years using Python, Go or Java - Design and deployment of highly available, enterprise - scale cloud infrastructure - Experience developing and delivering systems on at least one...

  • Application/software Architect

    6 days ago

    Cape Town, South Africa Posting on behalf of another company Full time

    Our Cape Town-based client seeks a skilled and experienced Application/Software Architect to join their mission-driven organization dedicated to equal access to education and empowering students to achieve their academic goals. **Requirements**: - Bachelor’s degree in computer science, Software Engineering, or a related field (required). - Strong...

  • Architect: Cyber Security

    1 day ago

    Cape Town, South Africa Ad Talent Africa Full time

    **Who are we**:South African retail bank **Who are we looking for**:Architect: Cyber Security with** **8+ years experience in general programming **What will you do**: **What do you need**: - 8+ years experience in general programming - 2+ years general IT Architecture - 2+ years using Python, Go or Java - Design and deployment of highly available,...

  • AWS Architect

    3 weeks ago

    Cape Town, South Africa Dimension Data Full time

    FunctieomschrijvingAre you tired of the corporate culture? Are you passionate about technology and want to work on cutting edge infrastructure? We are looking forward to hearing from you!As an AWS Architect, you'll be responsible for designing and architecting the services that will power our cloud based applications. You'll also be responsible for ensuring...

  • Security Architect

    1 week ago

    Cape Town, South Africa Dynamic Outsourced Solutions Full time

    This role will be responsible for providing technical security advice and guidance with a focus on the Group/South Africa organization. This candidate will be involved in multiple change projects and be responsible for producing and publishing tailored Security best practice guidance. Key Responsibilities •Providing security advice, requirements and...

  • AWS Solutions Architect

    1 week ago

    Cape Town, South Africa PikUniq Full time

    Attention: Please note that the hiring team responsible for this position will be using the PikUniq platform for candidate screening and conducting one-way interviews. Each application received will be carefully evaluated and screened. Further information on how to get started will be provided. We are looking forward to receiving your...

  • Solutions Architect Hybrid Networks WAN

    3 weeks ago

    Cape Town, South Africa Dimension Data Full time

    FunctieomschrijvingDo you want to work in a company where your voice counts? Do you want to help create new and innovative products for our customers? Do you want to be part of an innovative team that is constantly improving its processes and delivery? Apply for this Solutions Architect Hybrid Networks WAN (CPT) role!The Senior Solution Architect is an...

  • Solution Architect

    3 weeks ago

    Cape Town, South Africa Dimension Data Full time

    FunctieomschrijvingThe Software Architect is responsible for the design, modification, and integration of software systems to translate business requirements into technology terms. Specifically, this role develops software architecture and frameworks for software system according to the required specifications. They take responsibility of the various aspects...

  • Cyber Security Architect

    6 days ago

    Cape Town, South Africa DataTech Recruitment Full time

    Cyber Security Specialist required in Cape Town area - Hybrid, to analyse, design, implement and support Technology Security IT Services regarding Cyber Security aspects and solutions in support of the organization. 5+ years’ experience in IT Security related services and infrastructure (physical / virtual infrastructure, operating systems and supporting...

  • Solution Architect(IFS)

    3 weeks ago

    Cape Town, South Africa Blue Pearl PTY LTD Full time

    We are seeking a talented Solution Architect with expertise in IFS (Integrated Financial System) to join our client. As a Solution Architect for IFS, you will be responsible for designing, implementing, and optimizing financial software solutions using IFS. Your role will involve collaborating with stakeholders, analyzing business requirements, architecture...

  • IT Security Compliance Analyst

    7 days ago

    Cape Town, South Africa 5th Dimension Consulting Full time

    Feb 7, 2023 | Information Technology (IT), IT Auditing **Job Role** Support Application Development & Support Squads to adopt, implement and maintain approved patterns for logical access to ensure security best practices to comply to Group and Group Technology policies, baselines, configurations and standards. Also fulfil a governance role in identifying...