Purpose of the Job
The Information Security Architect is a senior cybersecurity professional responsible for designing, governing, and implementing enterprise security solutions that protect the organizations infrastructure, cloud environments, data, identities, and AI platforms. The role ensures technology initiatives are secure by design, aligned with business objectives, and compliant with security and regulatory requirements while serving as a trusted advisor to IT, Security, and business stakeholders.
Responsibilities
Lead the architecture and design of strategic security initiatives including ZTNA, PAM PIM, Passwordless Authentication, Network Segmentation, DLP, CASB, Vulnerability Management, and Threat Detection.
Design and govern security controls across Microsoft Azure M365, AWS, Google Workspace, cloud, data, and AI environments.
Develop and maintain security architecture standards, technical controls, and governance frameworks.
Ensure logging, monitoring, and telemetry are integrated with SIEM and SOC operations.
Support the secure adoption and governance of AI and Generative AI technologies.
Conduct Information Security Reviews ISR for IT projects, assessing risks, vulnerabilities, and compliance requirements.
Provide riskbased recommendations and approve security controls throughout the project lifecycle.
Produce security architecture documentation, solution designs, standards, and architecture decision records ADRs.
Support compliance initiatives related to ISO 27001, SOC 2, NIST CSF, and CIS Controls.
Act as a trusted advisor to IT leadership, project teams, and business stakeholders.
Participate in architecture review boards, governance forums, and vendor security assessments.
Communicate technical security concepts effectively to both technical and nontechnical audiences.
Knowledge Requirements
Required Experience
5 years of Information Security Cybersecurity experience.




2 years of Security Architecture experience.
Proven track record delivering complex security infrastructure projects from design through implementation.
Experience conducting security risk assessments, architecture reviews, and IT project security governance.
Technical Expertise
Strong experience in multiple areas such as
Zero Trust Network Access ZTNA
Privileged Access Management PAM PIM
Passwordless Authentication
Identity Access Management IAM
Network Security Segmentation
Data Loss Prevention DLP
Cloud Access Security Broker CASB
Vulnerability Management
Threat Detection Security Operations
Technologies
Microsoft Entra ID Azure AD
Microsoft Defender XDR Suite
Microsoft Purview
Azure Security Controls
Microsoft Sentinel
AWS Security Services
Google Workspace Security
CSPM Cloud Security Posture Management
DSPM Data Security Posture Management
AI Security Governance
Compliance Frameworks
ISO 270012022
SOC 2 Type II
NIST Cybersecurity Framework NIST CSF
CIS Controls
Soft Skills
Strong stakeholder management and communication skills.
Ability to translate complex technical concepts into businessfriendly language.
Excellent documentation and presentation capabilities.
Strong analytical and riskmanagement mindset.
Ability to balance security requirements with business needs.
Experience working with crossfunctional and integral teams.
Preferred
Certifications such as CISSP, CISM, SABSA, TOGAF, or Microsoft SC100.
Experience with Qualys VMDR, Netskope SASE, Security Automation, Infrastructure as Code IaC, and global enterprise environments.
Bolsa de trabajo Colombia ofrecemos puesto de Information Security Analyst para el sector de Informatica Telecomunicaciones en la empresa HH COLOMBIA de Bogotá, D.C.. Salario acorde a tu experiencia y al salario medio del sector. Actualiza ahora tu currículum vitae y postúlate a este empleo. Tipo de empleo Tiempo Completo.

📌 Information Security Analyst (Bogotá)
🏢 HH COLOMBIA
📍 Bogotá