Job Description – Delivery Security Architect (Secure by Design)

Role Title - Delivery Security Architect (Secure by Design – SbD)

Purpose

The Delivery Security Architect is responsible for embedding security into the lifecycle of business and IT initiatives from the earliest stages of design and delivery. The role ensures that solutions are secure by design, compliant with enterprise security policies, and aligned to organisational security standards.

Context

This role supports the organisation’s Secure by Design (SbD) and shift-left security initiatives by integrating security into solution design rather than retrofitting controls later in the lifecycle.

Delivery Security Architects work closely with project teams, solution architects, engineers, and delivery leads to ensure security is a foundational element of solution delivery across business and technology projects.

Key Responsibilities

1. Define Security Requirements for SbD Iterations (Delivery Security Requirements)

- Define and derive security requirements from:
- Business needs
- Compliance and regulatory obligations
- Threat models and risk assessments
- Conduct security exposure assessments to identify potential risks and vulnerabilities early in the project lifecycle.




- Ensure security requirements are clearly articulated, documented, and traceable.
- Maintain transparent, accessible documentation to guide:
- Solution architects
- Development teams
- Testing and assurance teams

2. Capture and Address Design Gaps (Security Exposure View)

- Evaluate solution and architecture designs against defined security requirements, standards, and controls.
- Identify security gaps within proposed designs.
- Classify identified gaps as either:
- A conscious design choice not to use an existing security control, or
- A missing enterprise‑wide capability requiring broader remediation.
- Document security findings, gaps, and recommended remediation actions.
- Collaborate with architects, engineers, and project leads to address identified gaps.
- Escalate systemic or recurring security capability gaps to the Advisory and Strategy teams for enterprise‑level resolution.

Stakeholder Engagement

- Work closely with delivery teams to embed security into solution design and decision‑making.
- Provide practical security architecture guidance throughout delivery.
- Act as a key security contact within project and program teams

#J-18808-Ljbffr

📌 Delivery Security Architect (City of Sydney)
🏢 Nityo Infotech
📍 City of Sydney