Purpose of the Job

The Information Security Architect is a senior cybersecurity professional responsible for designing, governing, and implementing enterprise security solutions that protect the organization's infrastructure, cloud environments, data, identities, and AI platforms. The role ensures technology initiatives are secure by design, aligned with business objectives, and compliant with security and regulatory requirements while serving as a trusted advisor to IT, Security, and business stakeholders.

Responsibilities

- Lead the architecture and design of strategic security initiatives including ZTNA, PAM/PIM, Passwordless Authentication, Network Segmentation, DLP, CASB, Vulnerability Management, and Threat Detection.
- Design and govern security controls across Microsoft Azure/M365, AWS, Google Workspace, cloud, data, and AI environments.
- Develop and maintain security architecture standards, technical controls, and governance frameworks.
- Ensure logging, monitoring, and telemetry are integrated with SIEM and SOC operations.
- Support the secure adoption and governance of AI and Generative AI technologies.
- Conduct Information Security Reviews (ISR) for IT projects, assessing risks, vulnerabilities, and compliance requirements.
- Provide risk-based recommendations and approve security controls throughout the project lifecycle.
- Produce security architecture documentation, solution designs, standards, and architecture decision records (ADRs).
- Support compliance initiatives related to ISO 27001, SOC 2, NIST CSF, and CIS Controls.
- Act as a trusted advisor to IT leadership, project teams, and business stakeholders.
- Participate in architecture review boards, governance forums, and vendor security assessments.




- Communicate technical security concepts effectively to both technical and non-technical audiences.

Knowledge & Requirements

Required Experience
- 5+ years of Information Security/Cybersecurity experience.
- 2+ years of Security Architecture experience.
- Proven track record delivering complex security infrastructure projects from design through implementation.
- Experience conducting security risk assessments, architecture reviews, and IT project security governance.

Technical Expertise

Strong experience in multiple areas such as:

- Zero Trust Network Access (ZTNA)
- Privileged Access Management (PAM/PIM)
- Passwordless Authentication
- Identity & Access Management (IAM)
- Network Security & Segmentation
- Data Loss Prevention (DLP)
- Cloud Access Security Broker (CASB)
- Vulnerability Management
- Threat Detection & Security Operations

Technologies
- Microsoft Entra ID (Azure AD)
- Microsoft Defender XDR Suite
- Microsoft Purview
- Azure Security Controls
- Microsoft Sentinel
- AWS Security Services
- Google Workspace Security
- CSPM (Cloud Security Posture Management)
- DSPM (Data Security Posture Management)
- AI Security & Governance

Compliance & Frameworks
- ISO 27001:2022
- SOC 2 Type II
- NIST Cybersecurity Framework (NIST CSF)
- CIS Controls

Soft Skills
- Strong stakeholder management and communication skills.
- Ability to translate complex technical concepts into business-friendly language.
- Excellent documentation and presentation capabilities.
- Strong analytical and risk-management mindset.
- Ability to balance security requirements with business needs.
- Experience working with cross-functional and integral teams.

Preferred
- Certifications such as CISSP, CISM, SABSA, TOGAF, or Microsoft SC-100.
- Experience with Qualys VMDR, Netskope SASE, Security Automation, Infrastructure as Code (IaC), and global enterprise environments.

📌 Information Security Analyst (Bogotá)
🏢 HH COLOMBIA
📍 Bogotá