Job Title: Security Architect

Location: Melbourne / Sydney, Australia

Work Type: Full time

About the Role:

We are seeking a highly skilled Security Architect to join our team and play a key role in designing, implementing, and reviewing enterprise security solutions. The ideal candidate will have a strong technical foundation in cybersecurity architecture, extensive experience in assessing third-party risks, and the ability to provide strategic guidance across business and IT functions to strengthen the overall security posture.

Key Responsibilities:

- Develop and maintain enterprise security architecture frameworks, standards, and roadmaps aligned with organizational goals.

- Conduct Security Architecture Reviews for internal systems, applications, and partner/third-party integrations.

- Evaluate proposed technology solutions to ensure compliance with security requirements and policies.

- Perform third-party and partner risk assessments, evaluating vendor controls and identifying potential vulnerabilities.

- Provide subject matter expertise on third-party risk to stakeholders across business and IT, recommending practical and effective risk mitigation strategies.

- Collaborate with cross-functional teams (IT, Risk, Legal, Procurement) to ensure end-to-end security throughout vendor lifecycle.

- Lead threat modeling and security design sessions for new initiatives, ensuring security best practices are embedded early.

- Identify gaps in existing security controls and provide actionable recommendations for improvement.

- Support compliance with regulatory frameworks and standards such as ISO 27001, NIST, and Essential Eight.





- Partner with incident response and governance teams to ensure architectural designs support resilience and rapid recovery.

Required Skills & Experience:

- Bachelor’s or Master’s degree in Information Security, Computer Science, or a related discipline.

- 8+ years of experience in information security, with at least 4 years in a Security Architecture or equivalent senior technical role.

- Proven experience conducting third-party/vendor risk assessments and security architecture reviews.

- In-depth knowledge of security frameworks such as SABSA, TOGAF, NIST CSF, and ISO 27001.

- Strong understanding of cloud security architecture (AWS, Azure, or GCP).

- Ability to translate complex technical risks into business impact and actionable strategies.

- Excellent communication and stakeholder engagement skills across business and IT teams.

- Relevant certifications preferred: CISSP, CISM, SABSA, CCSP, or AWS/Azure Security Specialty.

Nice to Have:

- Experience with regulatory compliance requirements (APRA CPS 234, GDPR, SOC2).

- Familiarity with DevSecOps and secure software development lifecycle (SSDLC).

- Knowledge of identity and access management, network segmentation, and data protection strategies.

When you apply, you voluntarily consent to the disclosure, collection and use of your personal data for employment/recruitment and related purposes in accordance with the Tech Aalto Privacy Policy, a copy of which is published at Tech Aalto’s website (https://www.techaalto.com/privacy/)

Confidentiality is assured, and only shortlisted candidates will be notified for interviews.

📌 Cybersecurity+ TPRM (Melbourne)
🏢 Tech Aalto
📍 Melbourne