Enterprise Security Architect

ENTERPRISE SECURITY ARCHITECT

Location: Perth, Western Australia (hybrid; some interstate travel)

Engagement: Full-time permanent, or fixed-term contract

Reports to: Chief Information Security Officer / Head of Technology

Role Type: Fulltime

Accelerate Workforce Solutions is looking for a senior Enterprise Security Architect.

Purpose of the role

The Enterprise Security Architect owns the target-state security design for the organisation's technology estate and holds design authority over the changes that move it there. The role sits between the security function and delivery: translating risk appetite and regulatory obligation into buildable patterns, and translating technical exposure into terms the CIO, CFO and board can act on.

This is a hands-on architecture role with governance weight, not a review-and-comment position. The successful candidate will produce designs, defend them at architecture boards, and stay engaged through delivery.

KEY RESPONSIBILITIES

Architecture and design authority

• Define and maintain the enterprise security architecture across on-premise, cloud (AWS and Azure) and operational technology environments

• Act as security design authority for major programs — approving designs, setting review gates, and holding delivery teams to the agreed pattern

• Produce reusable security patterns rather than one-off designs, and drive their adoption across delivery teams

OT/IT convergence

• Design and govern the OT/IT boundary for industrial, utility and building systems

• Set security requirements for OT vendors and hold them to contract, including where product-level security uplift is not contractually guaranteed

• Establish monitoring and segmentation approaches appropriate to availability-critical environments

Cloud and platform security

• Own cloud security architecture, control alignment and SIEM-integrated compliance reporting

• Build secured release approval into delivery processes so that assurance is evidenced rather than asserted

• Review third-party and SaaS deployments for control gaps against internal and regulatory obligations

Identity and privileged access

• Set IAM and PAM strategy: standing-privilege reduction, non-human and machine identity, RBAC/ABAC modelling, federation

• Govern remediation of legacy directory estates and brokered production access

Governance, risk and regulatory

• Align the control framework to recognised standards and map it against applicable obligations — SOCI, CPS 230, ISO 27001, Essential Eight, PCI DSS, and privacy legislation

• Support operational resilience work: business impact analysis, business-aligned RTO/RPO setting, and BCP/DR design

• Prepare architecture evidence for internal audit and regulator engagement

Emerging risk

• Establish AI governance and security-for-AI controls folded into existing governance structures rather than run in parallel, including agentic and non-human identity exposure

• Lead post-quantum readiness: cryptographic bill of materials, harvest-now-decrypt-later channel prioritisation, and cryptographic agility as the target state

Stakeholder and uplift

• Present architecture positions and risk trade-offs to executive and board audiences

• Mentor security engineers and consultants toward trusted-advisor standing with business stakeholders

ESSENTIAL SKILL AND EXPERIENCE

• Substantial enterprise security architecture experience across large, complex or regulated estates, including at least one critical-infrastructure, utility, financial services or equivalent environment

• Demonstrated design authority over a major program — able to evidence designs owned end to end, not contributed to

• Practical OT security experience and a working understanding of why availability-first environments resist IT security patterns

• Cloud security architecture across at least one major hyperscaler, with control mapping and automated compliance reporting

• Identity and privileged access design at enterprise scale (CyberArk, SailPoint or comparable)

• Fluency in translating between technical control detail and executive risk language, with board or regulator exposure

• Working knowledge of the Australian regulatory environment — SOCI, CPS 230, Essential Eight — and ideally comparative experience of an equivalent overseas regime

CERTIFICATIONS

Required: CISSP or equivalent senior security certification

Desirable: CCSP, SABSA, TOGAF, cloud-native security certifications, AI governance credentials such as TAISE

DESIRABLE

• CISO or interim CISO experience, or having stood up a security function from low maturity

• Operational resilience methodology design (DORA, PRA/FCA, or CPS 230 response)

• Incident leadership at P1 severity

• Consulting or client-facing delivery b

AWS is only looking for very experienced people with over 15+ years' experience, Please only apply if you can meet all selection criteria in skills and experience. No time wasters please.