Job Description

The Senior Security Architect (SSEA) reports to the Head of Architecture but is also accountable to the Delivery Head & Lead in the business/functional domain (aka Matrix Manager) that is being served. The SSEA is expected to possess deep technical expertise, potential leadership qualities & be solution oriented.
The below competencies are specific and targeted towards Customer Facing Mobile Apps and its associated eco-system, processes, and integrated components.
Domain Competencies:

• At least 3-5 years of technology experience & working knowledge of Banking Mobile Apps, their unique security features & API integration

• 3-5 years' experience in securing IOS & Android Mobile Apps and its associated ecosystem.

• Must understand the nitty-gritties of IOS & Android native controls as well as Third Party components that have the potential to make the mobile app more secure.

• Extensive knowledge and experience with designing and proposing solutions that combat Digital Fraud that typically takes place via Banking Mobile Apps

• Deep knowledge of how to implement key controls for Mobile Apps especially on Native Apps and APIs (both Ingress & Egress)

• Deep knowledge and/or Experience with Threat Modeling Banking Mobile Apps & it's integrated ecosystem.

• Deep knowledge and/or experience with prescribing balanced Security Requirements for Banking Mobile Apps & it's integrated ecosystem.

• Deep understanding of global and regional regulatory requirements related to banking and financial services (e.g., PCI-DSS).

• Experience in implementing security solutions to ensure that Banking Mobile Apps comply with regulatory requirements and/or have minimal risks prior product releases.

• Knowledge of API Security Standards implementation for secure interoperability between different banking systems

• Deep knowledge and experience with designing & proposing People, Process & Technology controls to ensure secure build, deployment and distribution (to App Stores) of Banking Mobile Apps

• Ability to assess and integrate third-party technology solutions into Banking Mobile Apps from a security perspective.

• Understanding of Retail Banking Mobile App offerings, products, and processes

• Familiarity with emerging banking technologies and trends (e.g., blockchain, digital currencies, e-checks, ML)

• Knowledge & experience integrating industry best practice Fraud Management solutions for Banking Mobile Apps

Technical Competencies:

• Deep understanding of conducting Data Classification & Asset Valuation activities

• Knowledge of conducting Threat Modeling using frameworks of choice

• Deep understanding of Application Security (OWASP Top 10 or similar), API Security & Mobile Security (Mobile OWASP Top 10)

• Deep understanding of Infrastructure Security including but not limited to Containers, Virtual Machines, Operating Systems, Databases, and Interfaces such as payment switches, APIs, event-treaming systems, file transfer systems.

• Experience with end-end to security requirements and solutioning via collaboration with peer Architects, tech leads and associated stakeholders.

• Experience in Development of standards, patterns, and best practices for reuse. Promotion of design adherence to bank policies, standards, architectural principles, and guidelines

• Must be able to create security solution-oriented presentations for Senior Technical and/or Business Leaders

• Must be able to tailor language and communication based on the audience

Requirements
Responsibilities:

• Conduct Data Classification, Asset Valuation, Threat Modeling, Security Requirements & Patterns within realistically agreed timelines

• Influence squads/teams to implement secure design to ensure risk reduction of the product prior to release & in the long run.

• Deliver secure solutions within realistically agreed timelines.

• Optimize Shift-Left processes within the team.

• Ensure seamless governance within realistically agreed timelines.

• Run education, socialization, and awareness workshops with squad/tribe members and/or peers.

• Do specialized technical or soft skill learning courses and/or achieve certifications.

• Excel at Collaboration, Ownership, Drive & Enterprising (CODE) values of Emirates NBD

• Coach & mentor associate architects to improve the quality of the team and the product.

• Introduce & implement innovative ways of working to deliver value within squads (Preferred)

• Engage in Stretch Assignments/Goldilocks Tasks to contribute value to the organization (Preferred)

Skills Required