Enterprise Security Architect

必須

• Bachelor's degree in Computer Science, Information Technology, or related field; Master's degree preferred.
• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) certification is required.
• Minimum of 10 years of experience in information security, with a focus on security architecture and engineering.
• Strong knowledge of security technologies, protocols, and frameworks, such as ISO 27001, NIST, and OWASP.
• Experience with designing and implementing security controls for cloud environments, network infrastructure, and software applications.
• Excellent analytical, problem-solving, and project management skills.
• Strong communication and interpersonal skills to collaborate with diverse teams and stakeholders.

使用ツール

Overview

• Nomura has a robust global Information Security department, members of which are located in all of its major regions, namely Japan, Americas, India, Asia Excluding Japan (AeJ) and EMEA. This role will report directly to the Group head of Security Architecture and Engineering located in London and will be a senior member of the Security Architecture and Engineering Group.

Key objectives critical to success

• We are looking for a talented and experienced professional to join our team as Enterprise Security Architect. In this role, you will part of a team leading the design, development, and implementation of a robust and scalable information security architecture to protect Nomura’s critical assets and infrastructure on a global scale. This role is hands-on as the security architecture and engineering strategy and roadmap are being developed. It requires the development and implementation of processes, policies, standards, roadmap, patterns and solutions in collaboration with the Global Heads of Information Security and key stakeholders (e.g., Technology, business, legal, HR, compliance). You will play a key role in shaping our information security strategy and ensuring the resilience and effectiveness of our security solutions.

Key Responsibilities

• Develop and maintain a comprehensive information security architecture framework that aligns with the business objectives and the Security Risks and Controls Framework.
• Develop and maintain the reference architecture for security and ensure it is fully aligned with the enterprise reference architecture.
• Define and implement security standards, best practices, and guidelines for technology infrastructure, applications, and systems.
• Deign secure network architecture, cloud security solutions, and endpoint protection mechanisms including roadmap and patterns.
• Collaborate with cross-functional teams to evaluate and select security technologies and tools that meet Nomura’s requirements, including AI/ML, SaaS, security automation, and R&D.
• Provide technical guidance and expertise on security infrastructure design, configuration, and deployment.
• Provide clarity to IT (including projects) to ensure the most optimal risk reduction solutions are implemented.
• Design security controls and measures to protect against cyber threats, malware, and unauthorised access.
• Conduct security architecture reviews and assessments to identify gaps, vulnerabilities, and areas for resilience improvement.
• Stay current on emerging technologies, trends, and threats in the field of information security architecture and engineering.
• Collaborate with internal and external stakeholders to ensure alignment with industry standards, regulatory requirements, and compliance frameworks.