Business Architect − Security

Reference: JHB001985-Patro-1

To develop a security landscape aligned with the company’s strategic projects and initiatives, and to support the successful implementation of physical security infrastructure, solutions and technologies. Duties & Responsibilities

JOB DESCRIPTION

• Develop and maintain company’s business architecture landscape, including a security taxonomy and related security reference model.

• Direct the implementation of the business architecture consisting of the capabilities, products and business services in support of the business strategy.

• Develop and implement the business capabilities in terms of key processes and information requirements.

• Develop and implement the company roadmaps to achieve target business/security architectures.

• Develop foundation, reference- and strategic-level architectures for the department, incorporating a strong security framework perspective that includes threat identification, trust and domain frameworks.

• Develop the company’s portfolio architecture and implementation roadmap to guide programme delivery.

• Define the target architecture to enable the Group Security Policy and Group Security Strategy by documenting the current landscape and conducting a gap analysis between the current and future state (as-is baseline and to-be target).

• Govern the implementation of the roadmaps.

• Contribute to formulating, translating, advocating, supporting and executing the business strategy to achieve the organisation’s targeted business outcomes.

• Develop diagnostic and actionable deliverables that help the business guide investment decisions in support of executing the business strategy.

• Ensure alignment between business architecture, enterprise architecture, solution architecture, architecture principles and information and communications technology (ICT) standards to ensure standardisation and reduce risk.

• Make recommendations on key architecture decisions.

• Participate in the company group’s business architecture and enterprise architecture governance structures.

• Ensure compliance with company policies, procedures and other legislative requirements, and ensure that risks within the function are identified, assessed and mitigated.

• Take a proactive approach in identifying integration needs across the company group and work towards target architecture regarding business integration.

• Lead the analysis of business and operating models, market trends and the technology industry to determine their potential impact on the enterprise’s business strategy, direction and architecture.

• Consult infrastructure, project and product teams to ensure alignment with the business architecture and identify when updates are required.

JOB REQUIREMENTS

Job requirements

• An Honours’ degree in BCom Informatics, BSc Computer Science, BSc Engineering or a related field, supplemented by industry-specific certifications or an equivalent qualification

• Certification in Sherwood Applied Business Security Architecture (SABSA)

• Certification in The Open Group Architecture Framework (TOGAF); and

• 8−10 years’ relevant experience in Business Architecture and/or Domain Architecture, with at least 5 years in a Security Business Architecture environment.

Additional requirements include

• Business modelling and capability mapping

• Business attribute profiling

• Business service design and management

• Threat and risk analysis methodologies

• Architecture principles, including the development of architecture designs, views and viewpoints

• Building block design and architecture building blocks

• Solution modelling and architecture design

• Benefits analysis and value-realisation assessment

• The application of enterprise and security architecture frameworks and methodologies, including SABSA

• Security frameworks, standards and best practices, including ISO 27000 series, NIST and related industry standards

• Architecture modelling tools and notations such as ArchiMate, UML and BPMN

• Establishing, maintaining and populating architecture repositories; and

• Systems integration and the management of complex, parallel-processing environments.

Package & Remuneration

Annually