Senior Cyber Security Architect

Location: Qatar Contract We are seeking a Senior Cyber Security Architect in Qatar to provide experienced security architecture capacity on a consulting basis, supporting architecture assessments, solution reviews, security design and documentation across applications, infrastructure, cloud, data, identity and emerging technologies. The role is advisory and delivery-focused, working under the direction and governance of the organisation s management, with knowledge transfer and reusable documentation as core outcomes. At least 10 years of cyber security experience, including enterprise security architecture in a highly regulated environment, and a senior-level security certification such as CISSP or CISM are mandatory for this position. Key Responsibilities • Deliver assigned security architecture priorities and support stakeholders across the engagement • Perform security architecture assessments across on-premises, hybrid and multi-cloud environments, applications, APIs, platforms, networks, endpoints, data and third-party integrations • Propose designs aligned with Zero Trust principles, including strong identity, least privilege, continuous verification and explicit access decisions • Prepare security architecture requirements and design recommendations for IAM, PAM, secrets management, cryptography, key management, data protection, network security, endpoint security, application security and security monitoring • Assess emerging technologies, including generative AI and machine-learning solutions, and document data, model, identity, integration, misuse, third-party and regulatory risks with proposed safeguards • Recommend measures that support cyber resilience, including secure redundancy, recovery, immutable protection, segmentation, tested failover and incident containment • Identify and document architecture risks and control gaps, propose compensating controls and support remediation tracking • Apply approved, reusable and cost-effective security patterns, and provide evidence-based analysis of technology options including resilience, vendor dependency and total cost • Engage early with enterprise architects, project managers and technology teams to understand requirements, threat exposure and regulatory obligations • Develop and maintain reference designs, standards and reusable patterns, and produce complete deliverables, decision records and knowledge-transfer materials in approved repositories • Transfer knowledge to designated personnel through documentation, walkthroughs, technical briefings and handover sessions Compliance & Governance • Comply with all applicable laws, regulations, contractual obligations, policies and security requirements communicated for the engagement • Operate solely within the approved scope, access rights and instructions; architecture approval, risk acceptance and exceptions remain with authorised personnel • Immediately report security incidents, suspected data exposure, conflicts of interest, control breaches and material delivery risks through the designated channels • Complete all mandatory onboarding, security, privacy and compliance training before receiving or retaining access • Cooperate with audit, risk, compliance and regulatory evidence requests relating to the services performed • Maintain strict confidentiality of customer and internal information, and the professional certifications represented for the duration of the engagement Mandatory Requirements • Bachelor s degree in cyber security, computer science, computer engineering, information systems or a related discipline; a postgraduate qualification is an advantage • At least 10 years of relevant technology and cyber security experience, including substantial enterprise security architecture experience in banking, financial services or another highly regulated environment • Demonstrated experience with hybrid and multi-cloud architecture, Zero Trust, IAM/PAM, application and API security, data protection, network security and cyber resilience • CISSP, CISM or an equivalent senior-level security certification is required; SABSA, TOGAF, CCSP or major cloud-provider security certifications are advantageous Required Skills • Expert knowledge of enterprise security architecture, threat modelling, security control design and risk-based decision-making • Strong understanding of cloud shared-responsibility models, container and orchestration security, APIs, modern authentication, privileged access, encryption and key management • Working knowledge of AI security risks, data governance, model and integration controls, and responsible adoption of generative AI • Ability to translate complex technical risks into clear business, executive, audit and regulatory language • Strong stakeholder management, negotiation, facilitation, presentation and technical writing skills • Sound judgement, professional integrity, independence and the ability to challenge constructively • Excellent written and spoken English; Arabic is an advantage • Bachelor s degree in cyber security, computer science, computer engineering, information systems or a related discipline; a postgraduate qualification is an advantage • At least 10 years of relevant technology and cyber security experience, including substantial enterprise security architecture experience in banking, financial services or another highly regulated environment • Demonstrated experience with hybrid and multi-cloud architecture, Zero Trust, IAM/PAM, application and API security, data protection, network security and cyber resilience • CISSP, CISM or an equivalent senior-level security certification is required; SABSA, TOGAF, CCSP or major cloud-provider security certifications are advantageous