Security Architect

Security Architect

Department: Engineering / Security Location: Accra / Hybrid Employment type: Full-time

About the Role

We are seeking a Security Architect to design and govern the security of our systems, applications, and data. You will define the security architecture and standards that protect the organization, assess risk across our technology landscape, and embed strong security practices into how we build and operate. This is a strategic yet hands-on role for someone who can balance robust protection with practical, business-enabling solutions.

Key Responsibilities

• Design and maintain the organization's security architecture across applications, infrastructure, networks, and cloud environments.
• Define security standards, patterns, and reference designs, ensuring consistent application across teams.
• Conduct threat modeling, risk assessments, and architecture reviews to identify and mitigate vulnerabilities.
• Design identity and access management (IAM), authentication, authorization, and encryption strategies.
• Establish controls for data protection, privacy, and regulatory compliance (e.g., GDPR, ISO 27001, SOC 2, or local equivalents).
• Evaluate and recommend security tools and technologies, guiding build-vs-buy decisions.
• Embed security into the software development lifecycle (secure-by-design, DevSecOps, secure coding practices).
• Lead the design of monitoring, detection, and incident-response capabilities in partnership with security operations.
• Produce and maintain security documentation, policies, and architecture guidance.
• Advise engineering, product, and leadership teams on security risk and mitigation, and mentor teams on best practices.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience).
• 5+ years of experience in information security, with 2+ years in a security architecture or senior security engineering role.
• Strong understanding of security architecture principles, threat modeling, and risk management frameworks.
• Hands-on experience securing cloud environments (AWS, Azure, or GCP) and their core security services.
• Solid knowledge of identity and access management, encryption, network security, and application security.
• Familiarity with security standards and frameworks such as NIST, ISO 27001, OWASP, and CIS.
• Familiarity with Ghana's Data Protection Act, 2012 (Act 843) and the requirements of the Data Protection Commission for handling personal data.
• Experience translating security requirements into practical designs that engineering teams can implement.