Chief Security Architect

Role Description The Chief Security Architect role at PT Hanrui Nickel Indonesia is a part-time, hybrid position based in Abu Dhabi Emirate, United Arab Emirates, with flexibility for some work-from-home arrangements. The Chief Security Architect is responsible for defining and maintaining the organization's overall security architecture, ensuring that systems, applications, and networks are designed and operated in line with best practices and regulatory requirements. Day-to-day responsibilities include conducting security assessments, designing secure solutions, reviewing technical designs and configurations, and providing guidance to engineering and IT teams on secure implementation. The role also involves developing security standards and reference architectures, collaborating with stakeholders to integrate security into business initiatives, and overseeing the remediation of identified risks and vulnerabilities. The Chief Security Architect will regularly review emerging threats and technologies, update security roadmaps, and support incident response activities with architectural expertise.
Qualifications

• Strong skills in Security Architecture Design, with experience creating enterprise-wide security frameworks, standards, and reference architectures.
• Expertise in Cybersecurity and Information Security, including risk assessment, threat modeling, security controls, and compliance with relevant regulations and industry standards.
• Proficiency in Network Security, with hands-on experience designing secure network topologies, segmentation, firewalls, VPNs, and intrusion detection/prevention systems.
• Experience in Application Security, including secure software development practices, code review, security testing, and integrating security into SDLC/DevSecOps processes.
• Proven ability to work with cross-functional teams, communicate complex security concepts to technical and non-technical stakeholders, and provide clear architectural guidance.
• Background in large-scale industrial, manufacturing, or critical infrastructure environments is highly beneficial.
• Bachelor's or Master's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.
• Relevant professional certifications (e.g., CISSP, CCSP, SABSA, TOGAF, OSCP, or similar) are an advantage.
• Demonstrated ability to operate in a hybrid work setting, manage priorities independently, and maintain high standards of integrity and confidentiality.