Enterprise Security Architect

Nomura has a robust global Information Security department, members of which are located in all of its major regions, namely Japan, Americas, India, Asia Excluding Japan (AeJ) and EMEA.

This role will report directly to the Group head of Security Architecture and Engineering located in London and will be a senior member of the Security Architecture and Engineering Group.

We are looking for a talented and experienced professional to join our team as Enterprise Security Architect.

In this role, you will part of a team leading the design, development, and implementation of a robust and scalable information security architecture to protect Nomura’s critical assets and infrastructure on a global scale.

This role is hands-on as the security architecture and engineering strategy and roadmap are being developed.

It requires the development and implementation of processes, policies, standards, roadmap, patterns and solutions in collaboration with the Global Heads of Information Security and key stakeholders (e.g., Technology, business, legal, HR, compliance).

You will play a key role in shaping our information security strategy and ensuring the resilience and effectiveness of our security solutions.

Develop and maintain a comprehensive information security architecture framework that aligns with the business objectives and the Security Risks and Controls Framework.

Develop and maintain the reference architecture for security and ensure it is fully aligned with the enterprise reference architecture.

Define and implement security standards, best practices, and guidelines for technology infrastructure, applications, and systems.

Deign secure network architecture, cloud security solutions, and endpoint protection mechanisms including roadmap and patterns.

Collaborate with cross-functional teams to evaluate and select security technologies and tools that meet Nomura’s requirements, including AI/ML, SaaS, security automation, and R&D.

Provide technical guidance and expertise on security infrastructure design, configuration, and deployment.

Provide clarity to IT (including projects) to ensure the most optimal risk reduction solutions are implemented.

Design security controls and measures to protect against cyber threats, malware, and unauthorised access.

Conduct security architecture reviews and assessments to identify gaps, vulnerabilities, and areas for resilience improvement.

Stay current on emerging technologies, trends, and threats in the field of information security architecture and engineering.

Collaborate with internal and external stakeholders to ensure alignment with industry standards, regulatory requirements, and compliance frameworks.