Job Summary
Lead U Mobile’s enterprise cybersecurity architecture function, setting the security direction, standards and long-term roadmap across IT, telecommunications networks, cloud, applications, data, digital platforms and emerging technologies. You will ensure security is built into technology initiatives from design through implementation, advise senior leaders on security risks and decisions, lead major security transformation initiatives, oversee vendors, and develop the cybersecurity architecture team.
The Day-to-Day Activities
Cybersecurity Strategy and Roadmap
-
Lead and maintain U Mobile’s enterprise cybersecurity architecture strategy, standards and multi-year roadmap in line with business, technology and network priorities.
-
Turn cybersecurity risks, threats, regulatory requirements and technology trends into prioritised initiatives and investment proposals.
-
Define future security capabilities, transition plans, dependencies and priorities for security transformation.
-
Advise senior management and technology leaders on key security architecture risks, options and decisions.
Security Architecture and Governance
-
Lead security architecture reviews for major IT, network, cloud, application, data, AI, digital, SaaS and third-party initiatives.
-
Establish and maintain security architecture principles, standards, design patterns and control requirements.
-
Review solution designs, data flows, integrations and proposals, providing clear security requirements and approval conditions.
-
Ensure key security principles, including secure-by-design, zero trust, least privilege, segmentation, encryption, resilience, monitoring and privacy, are applied throughout the technology lifecycle.
-
Maintain clear records of architecture decisions, exceptions, alternative controls and accepted risks for governance and audit purposes.
Enterprise and Telecommunications Security
-
Oversee security architecture across enterprise IT, cloud and on-premises infrastructure, identity, endpoints, networks, applications, APIs, databases and data platforms.
-
Provide security architecture direction for telecommunications environments, including RAN, transport, packet core, OSS/BSS, signalling, interconnect and virtualised or cloud-based network functions.
-
Define appropriate security approaches for access control, privileged access, system protection, APIs, encryption keys, logging, detection and recovery.
-
Ensure security controls consider availability, performance, scalability, operational needs and vendor support requirements.
Cloud, Application, Data and AI Security
-
Set security architecture requirements for cloud environments, containers, Kubernetes, software development and deployment processes, application security and software supply chains.
-
Guide identity and data security controls covering access management, privileged access, secrets, encryption, tokenisation, data loss prevention, data classification and secure information exchange.
-
Define security requirements for enterprise and generative AI, AI agents, model access, prompts and data, integrations, monitoring and third-party AI services.
-
Promote automated security controls and testing across applications, infrastructure and cloud environments.
Cybersecurity Risk, Compliance and Assurance
-
Translate applicable regulatory, industry and internal requirements into practical security architecture controls.
-
Lead security design risk assessments for critical systems, major changes, new technologies, acquisitions, outsourcing arrangements and security exceptions.
-
Confirm required controls are implemented and effective before go-live, with unresolved risks formally addressed, accepted or escalated.
-
Support audits, regulatory engagements and management assurance through complete architecture records, control mapping and remediation tracking.
Security Technology and Transformation
-
Lead technical assessments, proof-of-concept activities, testing and recommendations for cybersecurity platforms and strategic solutions.
-
Define solution requirements, evaluation criteria, integration needs and acceptance conditions.
-
Provide architecture leadership for major cybersecurity programmes, resolving design issues, dependencies and implementation risks.
-
Ensure solutions can be effectively supported after implementation, with clear ownership, monitoring, procedures and control evidence.
Stakeholder, Vendor and Financial Management
-
Partner with Architecture, IT, Network, Cloud, Application, Data, Digital, Procurement, Legal, Risk, Audit and business teams.
-
Influence senior stakeholders and technical teams to adopt appropriate security controls while supporting operational needs.
-
Hold vendors, service providers and technology partners accountable for agreed architecture, security and contractual deliverables.
-
Contribute to CAPEX and OPEX planning, business cases, prioritisation and benefits tracking for security architecture initiatives.
People Leadership and Capability Development
-
Lead, coach and develop cybersecurity architects and specialists, including objective setting, performance management and succession planning.
-
Establish consistent architecture review methods, templates, knowledge resources and quality standards.
-
Build internal capability through mentoring, technical knowledge sharing and targeted development.
-
Promote accountability, continuous learning and practical, risk-based decision-making.
Reporting and Continuous Improvement
-
Provide management reporting on architecture coverage, design risks, exceptions, roadmap progress, technical debt and remediation.
-
Monitor emerging threats, technology developments and lessons from incidents to improve security standards and priorities.
-
Assess security architecture maturity and recommend improvements based on identified gaps and business impact.