Security Architect

Job Posting Organization:
INTERPOL is the world’s largest international police organization, established in 192

• It has 196 Member Countries and facilitates cross-border police cooperation, supporting organizations and authorities in preventing and combating international crime. INTERPOL actively encourages applications from women and nationals of member countries that are currently unrepresented among its staff, promoting diversity and inclusion within its workforce. The organization operates globally, providing a platform for law enforcement agencies to collaborate effectively and securely.

Job Overview:
The security" style="border-bottom: 1px dotted #007bff !important;">Security Architect position at INTERPOL is a critical role within the Information and Communication Technologies (ICT) Executive Directorate. The incumbent will serve as the Security Architecture authority under the Chief Technology Officer (CTO), responsible for defining and evolving the organization’s security architecture strategy. This role is essential for ensuring that ICT systems across all platforms and services are secure, resilient, and compliant. The Security Architect will lead the integration of security-by-design principles throughout the entire lifecycle of ICT solutions, from concept to deployment, and will foster a culture of security ownership across various teams. The position requires close collaboration with the Head of Engineering and Solution Design to embed security architecture as a foundational component of all platform and solution designs, ensuring alignment with enterprise standards and regulatory obligations while adapting to evolving threat landscapes.

Duties and Responsibilities:
The Security Architect will have several key duties and responsibilities, including:

• Acting as the Security Design Authority by translating security requirements into scalable architecture patterns aligned with standards such as NIST CSF, ISO 27001, and Zero Trust.
• Leading the development of security architecture blueprints for cloud-native and hybrid environments, driving architectural governance, and participating in design review boards.
• Reviewing and approving solution architectures and technical designs from a security perspective, defining security reference architectures and reusable security components.
• Collaborating with solution architects and engineering teams to ensure consistent application of security principles across the organization.
• Partnering with engineering and compliance teams to implement governance frameworks and contribute to policy development.
• Owning and enhancing the Secure Software Development Lifecycle, performing secure design reviews, and driving developer enablement through training and resources.
• Defining and implementing cloud-native security controls and securing APIs and software supply chains.
• Performing any other duties as required by the supervisor.

Required Qualifications:
Candidates must possess a university degree in computer science, information security, or a related field, or have completed specialized higher education. Additionally, candidates should hold one or more industry certifications relevant to their duties, such as SABSA or CISSP for security architecture, CISM or CRISC for governance and risk, and CSSLP or DevSecOps Practitioner for secure software development. Other certifications related to cloud security and API security are also beneficial.

Educational Background:
The educational background required for this position includes a university degree (3 to 4 years) in computer science, information security, or a related field. Specialized higher education in these areas is also acceptable. Candidates are expected to have relevant industry certifications that align with their specific duties within the role.

Experience:
A minimum of 5 years of experience in a large and complex IT enterprise environment is required. Candidates should have proven hands-on experience in security roles, with at least 3 years specifically as a Security Architect. Experience in implementing DevSecOps practices in enterprise-level CI/CD pipelines is also essential.

Languages:
Fluency in English is mandatory for this position. Proficiency in a second official working language of the Organization, such as Arabic, French, or Spanish, would be considered an additional asset, enhancing the candidate's ability to communicate effectively within the diverse environment of INTERPOL.

Additional Notes:
The position is a fixed-term contract lasting 36 months, with the possibility of extension subject to satisfactory performance and availability of funds. Candidates should be prepared for tests and interviews approximately 1 to 3 weeks after the application deadline. Selected candidates will be expected to report for duty within one to three months after receiving an offer of employment. This selection exercise may also be used to create a reserve list of suitable candidates for future staffing needs.