Senior Manager: Digital Security Architect (Johannesburg)

The Senior Security Architect is responsible for defining, implementing, and governing the enterprise security architecture across the Company's telecommunications, digital, cloud, and enterprise technology environments. The role ensures that security is embedded into the design and delivery of mobile and fixed network services, OSS/BSS platforms, enterprise applications, customer digital channels, cloud platforms, APIs, data and AI solutions, enabling secure digital transformation while protecting the Company's customers, networks, information assets.

Responsibilities:

• Develop and maintain the enterprise security architecture aligned to business strategy, enterprise architecture principles, and cybersecurity standards.
• Design and govern secure architectures for telecommunications platforms, including OSS/BSS, ERP, CRM, mobile and fixed network services, digital channels, APIs, cloud platforms, and enterprise applications.
• Provide security architecture leadership for strategic initiatives, including 4G/5G evolution, IoT, enterprise connectivity, cloud transformation, AI adoption, and digital products.
• Ensure security is embedded throughout the solution lifecycle by applying secure-by-design and zero rust principles.
• Develop architecture standards for identity and access management (IAM), privileged access management (PAM), data protection, application security, API security, cloud security, and network segmentation.
• Provide security assurance for technology projects and ensure compliance with enterprise architecture standards, regulatory requirements, and cybersecurity policies.
• Collaborate with enterprise architecture, network engineering, digital, IT, product, and technology teams to deliver secure, scalable, and resilient technology solutions.

Qualifications, experience and technical

• Bachelor's degree in computer science, information systems, engineering, cybersecurity, or a related field. A postgraduate qualification is advantageous.
• 8–12 years' experience in information security, including 5–7 years in security architecture.
• Proven experience in enterprise environments, including OSS/BSS, ERP, CRM, cloud platforms, enterprise applications, APIs, and mobile/web solutions.
• Strong knowledge of enterprise security architecture, cloud security, IAM/PAM, identity governance, data protection, micro-segmentation, API and integration security, DevSecOps, Security for AI, and security incident management.
• Experience with hybrid and multi-cloud environments, telecommunications technologies (4G/5G, SDN, NFV, IoT), and Group/OpCo operating models.
• Sound understanding of cybersecurity governance, risk management, and regulatory frameworks, including POPIA, GDPR, PCI DSS, ISO 27001, and NIST.
• Professional certifications such as TOGAF or SABSA, CISSP, CISM, CCSP, Azure/AWS/GCP Security, and AI security certifications are preferred.