Business Architect − Security - GSMD

Brief description

• The main purpose of this position is to develop a security landscape aligned with the Group Security Management Department's GSMD strategic projects and initiatives, and to support the successful implementation of physical security infrastructure, solutions and technologies within GSMD.

Detailed description

The successful candidate will be responsible for the following key performance areas:

• Develop and maintain GSMD's business architecture landscape, including a security taxonomy and related security reference model SRM.
• Direct the implementation of the business architecture consisting of the capabilities, products and business services in support of the business strategy.
• Develop and implement the business capabilities in terms of key processes and information requirements.
• Develop and implement the GSMD roadmaps to achieve target business/security architectures.
• Develop foundation, reference- and strategic-level architectures for the department, incorporating a strong security framework perspective that includes threat identification, trust and domain frameworks.
• Develop GSMD's portfolio architecture and implementation roadmap to guide programme delivery.
• Define the target architecture to enable the Group Security Policy and Group Security Strategy by documenting the current landscape and conducting a gap analysis between the current and future state as-is baseline and to-be target.
• Govern the implementation of the roadmaps.
• Contribute to formulating, translating, advocating, supporting and executing the business strategy to achieve the organisation's targeted business outcomes.
• Develop diagnostic and actionable deliverables that help the business guide investment decisions in support of executing the business strategy.
• Ensure alignment between business architecture, enterprise architecture, solution architecture, architecture principles and information and communications technology ICT standards to ensure standardisation and reduce risk.
• Make recommendations on key architecture decisions.
• Participate in the South African Reserve Bank SARB Group's business architecture and enterprise architecture governance structures.
• Ensure compliance with SARB policies, procedures and other legislative requirements, and ensure that risks within the function are identified, assessed and mitigated.
• Take a proactive approach in identifying integration needs across the SARB Group and work towards target architecture regarding business integration.
• Lead the analysis of business and operating models, market trends and the technology industry to determine their potential impact on the enterprise's business strategy, direction and architecture.
• Consult infrastructure, project and product teams to ensure alignment with the business architecture and identify when updates are required.

Qualifications

Job requirements

To be considered for this position, candidates must be in possession of:

• an Honours' degree in BCom Informatics, BSc Computer Science, BSc Engineering or a related field, supplemented by industry-specific certifications or an equivalent qualification;
• certification in Sherwood Applied Business Security Architecture SABSA;
• certification in The Open Group Architecture Framework TOGAF; and
• 8−10 years' relevant experience in Business Architecture and/or Domain Architecture, with at least 5 years in a Security Business Architecture environment.

Additional requirements include

demonstrate knowledge and experience in

• business modelling and capability mapping;
• business attribute profiling;
• business service design and management;
• threat and risk analysis methodologies;
• architecture principles, including the development of architecture designs, views and viewpoints;
• building block design and architecture building blocks;
• solution modelling and architecture design;
• benefits analysis and value-realisation assessment;
• the application of enterprise and security architecture frameworks and methodologies, including SABSA;
• security frameworks, standards and best practices, including ISO 27000 series, NIST and related industry standards;
• architecture modelling tools and notations such as ArchiMate, UML and BPMN;
• establishing, maintaining and populating architecture repositories; and
• systems integration and the management of complex, parallel-processing environments.