Senior Security Architect

What you will be doing

• Own the end-to-end security architecture for enterprise mobile banking platforms.
• Define and govern security across mobile applications, APIs, cloud infrastructure, backend services, identity platforms, and DevSecOps pipelines.
• Design secure authentication and authorisation models using biometrics, PIN authentication, OAuth 2.0, OpenID Connect, PKCE, and device-bound credentials.
• Define security architectures for mobile applications on iOS and Android, including secure storage, hardware-backed keystores, and Secure Enclave technologies.
• Lead threat modelling for customer journeys including onboarding, authentication, payments, and account servicing.
• Develop security architecture patterns aligned with Zero Trust principles.
• Design and govern API security, Backend-for-Frontend (BFF) security, certificate pinning, mutual TLS, and secure communication models.
• Define cloud-native security controls across Azure, AWS, or GCP environments, including Kubernetes and container security.
• Embed Security-by-Design and Privacy-by-Design principles into solution architecture and delivery.
• Establish DevSecOps security guardrails including SAST, DAST, dependency scanning, container security, secrets management, and secure CI/CD pipelines.
• Design fraud prevention capabilities including device binding, transaction risk scoring, adaptive authentication, and behavioural analytics.
• Support penetration testing, vulnerability remediation, incident readiness, forensic readiness, and cyber resilience initiatives.
• Govern software supply chain security, including signed artefacts, SBOM, dependency management, and secure build pipelines.
• Define AI security controls, responsible AI guardrails, prompt injection prevention, and data protection for AI-enabled platforms.
• Provide architectural leadership across engineering, cybersecurity, fraud, compliance, privacy, operations, and executive technology teams.

What we are looking for

• Bachelor's Degree in Computer Science, Information Security, Information Technology, Engineering, or a related field.
• Extensive experience as a Security Architect within banking, financial services, fintech, or other highly regulated industries.
• Proven experience designing security architectures for enterprise mobile banking or digital platforms.
• Strong knowledge of mobile application security for iOS and Android.
• Expertise in OAuth 2.0, OpenID Connect (OIDC), PKCE, identity and access management, and secure session management.
• Strong understanding of cryptography, HSMs, enterprise key vaults, secure enclaves, and hardware-backed key management.
• Experience with API security, Zero Trust Architecture, API Gateways, certificate pinning, and mutual TLS.
• Hands-on experience with DevSecOps practices including SAST, DAST, containe

.special-hidden { display: none; }