Group Head of Security Architecture

Group Head of Security Architecture | Munich

Our client, a global organisation operating across multiple international markets, is hiring a Group Head of Security Architecture to lead its global Security Architecture function. Reporting to the Group CISO, you'll set the strategy for enterprise-wide security architecture and embed security into technology delivery, in a senior role with real influence over the organisation's security direction.

The role:

• Own the Group Security Architecture strategy and roadmap.
• Set enterprise-wide architecture standards and governance.
• Embed security-by-design across technology and transformation programmes.
• Advise the CIO, CTO and other senior stakeholders on security architecture.
• Govern secure architectures across cloud, infrastructure, applications and data.
• Develop reference architectures and technical standards for global use.
• Review and approve architectures for strategic programmes.
• Drive consistent practices across regions and business units.
• Guide security architecture for cloud, AI, Zero Trust and application development.
• Assess emerging technologies and threats to strengthen resilience.
• Ensure alignment with frameworks such as ISO 27001, NIST CSF, DORA, NIS2 and GDPR.
• Lead, mentor and grow an international team of Security Architects.
• Manage strategic vendor and technology partner relationships.

What you'll need:

• 10+ years in information security, including 5+ years leading Enterprise or Security Architecture teams.
• Track record building enterprise-wide security architecture strategy.
• Strong grounding in cloud security and enterprise architecture.
• Experience influencing executives and leading large-scale transformation.
• Exposure to areas such as Zero Trust, IAM/PAM, DevSecOps, AI and API security, and container/Kubernetes security.
• Familiarity with frameworks such as TOGAF, SABSA, ISO 27001 and NIST CSF.
• Degree in computer science, cyber security or related field preferred; CISSP, CISM, CCSP, SABSA or TOGAF certification a plus.