Lead- Enterprise Security Architect

Job Title : Lead – Enterprise Security Architect

Job Type : Permanent

Location : Dubai (On-Site)

Job Description:

About the role

Yallo is hiring a Lead Enterprise Security Architect for a leading Dubai-based retail group client. You will be the group’s senior security architecture authority. You’ll own the enterprise security architecture strategy, standards and target-state roadmap, and make sure security is built in by design across every transformation, digital initiative and technology investment.

The group runs many brands, stores, e-commerce platforms, warehouses and enterprise systems. The role is senior and hands-on: you lead the function as an individual contributor and are the trusted security advisor to technology and business leaders.

What you’ll do

• Define and own the group’s enterprise security architecture strategy, principles, standards and roadmap
• Build reference architectures and security patterns for cloud, applications, data, identity and infrastructure
• Own the Security Design Authority: govern architecture decisions, design exceptions and technology risk
• Bring security into every new project and BAU change from the start, across e-commerce, digital, SAP and enterprise platforms
• Carry out security architecture assurance and technical due diligence on new platforms, cloud services and third-party solutions
• Work with Enterprise Architecture, Engineering, Digital, Data and Product teams to shape technology roadmaps
• Represent Information Security at architecture, technology and investment forums
• Drive Zero Trust, DevSecOps and modern security engineering practices

What you’ll bring

• 12+ years in information security, including at least 10 years in security architecture at enterprise level
• Experience defining and governing security architecture across a complex, multi-business or global organisation
• Experience leading security architecture on large transformation, cloud adoption and modernisation programmes
• Broad, hands-on depth across cloud and hybrid security, IAM, network and infrastructure, application, API and data security, Zero Trust and DevSecOps
• Experience running a design authority or architecture governance forum
• Executive presence: able to influence CIO/CISO-level stakeholders and balance business enablement with cyber risk
• Retail, e-commerce or consumer sector experience, and SAP or ERP transformation experience, are highly desirable
• Certifications such as CISSP, SABSA, TOGAF, CCSP or cloud security architect certifications are a plus