We are seeking an experienced Cybersecurity Manager / Security Architect to lead security governance, architecture, accreditation, and compliance activities for a strategic cloud and data center environment. The successful candidate will serve as the primary security advisor, working closely with government authorities, stakeholders, and third-party contractors to ensure alignment between organizational security requirements and Oracle security standards. This role requires a strong combination of security architecture expertise, regulatory compliance knowledge, stakeholder management, and security assurance experience.
**Key Responsibilities Security Governance & Compliance **
Review, assess, and align the Authority's security policies, standards, and controls with Oracle security standards and best practices. Conduct security gap assessments and recommend remediation strategies to address identified risks. Ensure compliance with applicable regulatory, governance, and security requirements.
**Security Accreditation & Assurance **
Coordinate security accreditation and certification activities with the Authority and authorized third party assessors. Facilitate security compliance reviews and audits. Prepare, review, and maintain security documentation, risk assessments, and compliance evidence. Support security assurance activities throughout the project lifecycle. Security Architecture & Risk Management
Provide security architecture guidance to ensure solutions are designed and implemented in accordance with security requirements. Review technical designs and validate security controls across infrastructure, applications, and cloud environments. Identify security risks and recommend mitigation measures.
Security Testing & Validation
Oversee and coordinate security testing activities, including vulnerability assessments, penetration testing, and security reviews. Ensure all security testing outcomes, findings, and remediation actions are properly documented, tracked, and approved. Validate the effectiveness of implemented security controls.
Data Centre & Disaster Recovery Security
Validate physical security measures within hosting and Disaster Recovery Command Centre (DRCC) environments, including: Physical access controls Security zoning and caging Visitor management controls Review and validate logical security controls, including: Network security architecture Firewall and segmentation controls Identity and access management Security monitoring and logging Stakeholder Engagement • • • Lead and facilitate security workshops with customers, project teams, auditors, and stakeholders. Translate business and regulatory requirements into actionable security controls and technical requirements. Serve as the primary security liaison between the Authority, Oracle, and third-party contractors.
**Required Qualifications **
Minimum 8+ years of experience in cybersecurity, information security, or security architecture roles. Proven experience in security governance, risk management, compliance, and security architecture.
Experience managing security accreditation, audit, or certification processes.
Strong understanding of enterprise and cloud security frameworks and standards. Excellent stakeholder management, communication, and presentation skills
**Required Technical Expertise **
Security Governance and Risk Management
Security Architecture and Design Cloud Security Architecture Security Control Assessment Vulnerability Management Penetration Testing Oversight
Identity & Access Management (IAM)
Network Security Data Protection and Encryption Security Monitoring and Incident Response Principle
Career Level - IC3