Security Architect, Enterprise Architecture

The role

Reporting to the Head of Enterprise Architecture the IT Security Architect role will be responsible for enhancing APRA’s cybersecurity posture by ensuring a sound security foundation in architecture and design. The role will primarily support an initiative to raise and sustain Essential 8 maturity across the organisation as workloads transition to cloud services 

The team

APRA is embarking on an ambitious program of change incorporating cloud, data, digital and security initiatives. This has created the opportunity to join a small but growing Enterprise Architecture team which sits within the Technology and Data division. The EA team helps align business and IT strategy through target state and roadmap artefacts, supports major projects by developing architectural blueprints and advises on technology selection and procurement. We design reusable, foundational IT services for APRA.

Key stakeholders within the division include the CIO, IT Governance, Enterprise Security and Head of Central Services. We maintain informal relationships with architecture teams at peer regulators and government agencies to learn from each other 

Key responsibilities

• Contribute to the development and maintenance of security architecture designs, roadmaps and strategies to continuously mature and evolve APRA’s cyber security posture against Essential 8 maturity milestones;
• Ensure current and future IT services are designed and operated with appropriate controls to manage risk. Identify and evaluate risks associated with proposed and operating solutions, considering factors such as data privacy, security vulnerabilities, compliance requirements, and technology limitations. Identify remediating actions and controls;
• Review and ensure security documentation is up to date and maintained;
• Support APRA’s transition to cloud services by designing secure cloud solutions that align with industry best practices, vendor recommendations and compliance requirements;
• Build strong and deep relationships with internal and external stakeholders, including senior leadership, extended leadership team and business partners. Provide architectural leadership advice and alignment between different projects and stakeholders; and
• Contribute to the ongoing development of the EA practice

About you

• Demonstrable experience as an infrastructure or security architect, skilled in designing solutions and controls that comply with PSPF, ISM, Essential8 in a hybrid cloud environment;
• Experience of cloud architecture and securing workloads in Microsoft Azure and M365 is essential;
• Certifications such as AZ-500, SC-100, CISSP or CISM are advantageous Background in architecture roles providing technical leadership in multi-year transformation projects;
• Strategic approach on how to achieve the target architecture and translate these proposals into concrete plans for delivery aligned to defined cost and time constraints;
• Ability to work with a wide range of technical and business stakeholders to align delivery plans with business needs, expectations and other inflight project initiatives – the ability to communicate technical concepts to business stakeholders is essential for impact and influence;
• Well-developed influencing skills with a confident ability to navigate competing stakeholder concerns and priorities. Team player, willing to share experiences, offer advice and guidance to more junior staff and contribute to a positive culture of excellence; and
• Experience of working in the financial services industry is advantageous

To work with us, you need to be an Australian citizen with eligibility to gain a Baseline Security clearance.

About APRA

The Australian Prudential Regulation Authority (APRA) places you at the heart of Australia’s financial services industry. APRA serves the Australian community by helping ensure financial institutions deliver on the financial commitments they make, within a stable, efficient and competitive financial system.

At APRA we’re committed to providing an inclusive workplace where everyone belongs, feels valued and respected. We aspire to attract and foster diversity of background, thought, and experience, recognising that a broad range of perspectives, approaches and ideas makes us stronger, and better enables us to meet our obligation to protect the financial wellbeing of the Australian community. When applying, please inform us of any adjustments you may need during the interview process.