[04/10/2025] Senior Security Architect

Job Description

The Senior Security Architect (SSEA) reports to the Head of Architecture but is also accountable to the Delivery Head & Lead in the business/functional domain (aka Matrix Manager) that is being served. The SSEA is expected to possess deep technical expertise, potential leadership qualities & be solution oriented.

The below competencies are specific and targeted towards Customer Facing Mobile Apps and its associated eco-system, processes, and integrated components.

Domain Competencies:

- At least 3-5 years of technology experience & working knowledge of Banking Mobile Apps, their unique security features & API integration
- 3-5 years experience in securing IOS & Android Mobile Apps and its associated ecosystem.
- Must understand the nitty-gritties of IOS & Android native controls as well as Third Party components that have the potential to make the mobile app more secure.
- Extensive knowledge and experience with designing and proposing solutions that combat Digital Fraud that typically takes place via Banking Mobile Apps
- Deep knowledge of how to implement key controls for Mobile Apps especially on Native Apps and APIs (both Ingress & Egress)
- Deep knowledge and/or Experience with Threat Modeling Banking Mobile Apps & it's integrated ecosystem.
- Deep knowledge and/or experience with prescribing balanced Security Requirements for Banking Mobile Apps & it's integrated ecosystem.
- Deep understanding of global and regional regulatory requirements related to banking and financial services (e.g., PCI-DSS).
- Experience in implementing security solutions to ensure that Banking Mobile Apps comply with regulatory requirements and/or have minimal risks prior product releases.
- Knowledge of API Security Standards implementation for secure interoperability between different banking systems
- Deep knowledge and experience with designing & proposing People, Process & Technology controls to ensure secure build, deployment and distribution (to App Stores) of Banking Mobile Apps
- Ability to assess and integrate third-party technology solutions into Banking Mobile Apps from a security perspective.
- Understanding of Retail Banking Mobile App offerings, products, and processes
- Familiarity with emerging banking technologies and trends (e.g., blockchain, digital currencies, e-checks, ML)
- Knowledge & experience integrating industry best practice Fraud Management solutions for Banking Mobile Apps

Technical Competencies:

- Deep understanding of conducting Data Classification & Asset Valuation activities
- Knowledge of conducting Threat Modeling using frameworks of choice
- Deep understanding of Application Security (OWASP Top 10 or similar), API Security & Mobile Security (Mobile OWASP Top 10)
- Deep understanding of Infrastructure Security including but not limited to Containers, Virtual Machines, Operating Systems, Databases, and Interfaces such as payment switches, APIs, event-treaming systems, file transfer systems.
- Experience with end-end to security requirements and solutioning via collaboration with peer Architects, tech leads and associated stakeholders.
- Experience in Development of standards, patterns, and best practices for reuse. Promotion of design adherence to bank policies, standards, architectural principles, and guidelines
- Must be able to create security solution-oriented presentations for Senior Technical and/or Business Leaders
- Must be able to tailor language and communication based on the audience

Requirements

Responsibilities:

- Conduct Data Classification, Asset Valuation, Threat Modeling, Security Requirements & Patterns within realistically agreed timelines
- Influence squads/teams to implement secure design to ensure risk reduction of the product prior to release & in the long run.
- Deliver secure solutions within realistically agreed timelines.
- Optimize Shift-Left processes within the team.
- Ensure seamless governance within realistically agreed timelines.
- Run education, socialization, and awareness workshops with squad/tribe members and/or peers.
- Do specialized technical or soft skill learning courses and/or achieve certifications.
- Excel at Collaboration, Ownership, Drive & Enterprising (CODE) values of Emirates NBD
- Coach & mentor associate architects to improve the quality of the team and the product.
- Introduce & implement innovative ways of working to deliver value within squads (Preferred)
- Engage in Stretch Assignments/Goldilocks Tasks to contribute value to the organization (Preferred)