Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 9 hours ago

Information Security Architect

HH Global85 open roles

Where
Bogotá, Bogota, Colombia
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowInformation Security ArchitectHH Global · Bogotá, Bogota, Colombia

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on HH Global's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. HH Global postings stay open a median of 20 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 9 hours ago

HH Global median: 20 days open

The posting

Purpose of Role

The Information Security Architect is a senior technical role responsible for leading the design and delivery of security solutions across the organisation’s infrastructure and technology programmes. This individual will serve as a subject matter expert on complex security infrastructure projects, providing architecture and design guidance to ensure that all solutions are secure by design and aligned to the organisation’s risk appetite and strategic security vision.

The role has two primary pillars of responsibility. First, the Architect will drive solution designs for strategic security infrastructure initiatives, including but not limited to Zero Trust Network Access (ZTNA), Privileged Identity and Access Management (PIM/PAM), Passwordless Authentication, Network Segmentation, Data Loss Prevention (DLP), Cloud Access Security Broker (CASB) technologies and implementing best practices for Vulnerability Management and Threat Detection capabilities. Second, the Architect will act as an Information Security Review (ISR) resource, assisting with IT project reviews and risk assessments to ensure appropriate security controls are embedded throughout the project lifecycle.

The successful candidate will bring strong technical depth across security architecture domains, the ability to communicate complex security concepts to both technical and non-technical stakeholders, and a pragmatic approach to balancing security requirements with business objectives.

This role sits with the Security Operations function of the Information, Security and Risk department to ensure all controls are operationally effective, integrated into detection tooling, and optimised for real-world threat response.

Key Responsibilities

Security Architecture & Solution Design

Lead the security architecture and solution design for strategic security infrastructure projects, including ZTNA, PIM/PAM, Passwordless Authentication, Network Segmentation, DLP, and CASB implementations, with a SOC-Centric approach at the forefront. Define, maintain security architecture and governance controls for cloud, data, and AI platforms, including CSPM, DSPM, and AI DSPM capabilities, ensuring the protection of sensitive information and compliance with organisational and regulatory requirements. Ensure logging and telemetry is captured and maintained into SIEM solutions and aligned with SOC requirements. Architect Microsoft Stack security controls, including Defender XDR ecosystems and Entra ID security architecture are designed and optimised. Architect security controls and standards on other supported platforms, including AWS and Google Workspace. Evaluate, recommend, and set security baselines for new and existing security technologies, ensuring alignment with industry best practice and organisational requirements. Lead the secure adoption and governance of Artificial Intelligence (AI) and Generative AI technologies across the organisation and ensure AI platforms comply with information security, data protection, privacy, intellectual property, and regulatory requirements. Produce high-quality security architecture documentation including solution designs, architecture decision records (ADRs), and technical standards. Collaborate with IT, infrastructure, and engineering teams to translate security requirements into practical and deliverable technical solutions. Provide expert guidance on cloud security architecture (Azure / Microsoft 365 ecosystem) including identity, network, data, and application security controls.

IT Project ISR Review & Risk Assessment

Act as the Information Security Review (ISR) representative for IT projects, assessing proposed solutions, designs, and changes for security risk and compliance. Conduct structured security risk assessments of IT projects and solution designs, identifying threats, vulnerabilities, and gaps against security standards and policies. Conduct security and privacy assessments of AI services, including data handling, model usage, third-party risk, and integration controls. Provide clear and actionable risk-based recommendations to project teams and stakeholders, enabling informed decision-making and risk ownership. Review and approve IT changes and solution designs, applying security-conscious principles and ensuring residual risks are understood and accepted appropriately. Maintain an ISR register and track the status of security recommendations, exceptions, and risk acceptances across the project portfolio. Work collaboratively with the ISR team to ensure consistent application of the security review process across all IT projects.

Governance, Risk & Compliance

Contribute to the development and maintenance of information security policies, standards, and procedures, particularly those relating to architecture, design, and technology controls. Support the ongoing maintenance of the ISO 27001:2022 ISMS and SOC 2 Type 2, ensuring Architectural controls are documented and evidenced appropriately. Assist with security risk assessments, gap analyses, and the management of remediation actions arising from audit findings or control deficiencies.

Stakeholder Engagement & Collaboration

Act as a trusted security adviser to IT leadership, project managers, and technical teams, providing pragmatic and commercially aware security guidance. Represent the Information Security function in architecture review boards, project steering groups, and technical design authorities. Liaise with third-party vendors and managed service providers to evaluate security capabilities and ensure contractual security obligations are met. Communicate security architecture decisions and risk positions clearly to both technical and non-technical audiences, including senior stakeholders.

Knowledge Requirements

Essential

Demonstrable experience in information security architecture, with a strong track record of delivering complex security infrastructure projects from design through to implementation. Deep technical expertise across two or more of the following domains: ZTNA, PIM/PAM, Passwordless Authentication, Network Segmentation, DLP, and CASB. Strong knowledge of Microsoft security technologies, including Microsoft Entra ID (Azure AD), Microsoft Defender suite, Microsoft Purview (DLP/CASB), and Azure networking security controls Strong understanding of Data Security Posture Management (DSPM), Cloud Security Posture Management (CSPM) and AI Security and Governance Experience conducting security risk assessments and ISR reviews for IT projects, with the ability to produce clear risk-rated findings and recommendations. Sound knowledge of identity and access management principles, including privileged access workflows, just-in-time access, and zero trust identity architectures. Knowledge of network security architecture, including firewall policy design, micro segmentation, east-west traffic controls, and secure remote access patterns. Familiarity with ISO 27001:2022, SOC 2 Type 2 and other relevant frameworks (e.g. NIST CSF, CIS Controls). Fluent in English language with excellent written and verbal communication skills, with the ability to produce high-quality architecture documentation and present complex topics clearly to diverse audiences. 5+ years information / cyber security experience, with 2+ years architecture experience

Desirable

Relevant professional certifications such as CISSP, CISM, SABSA, TOGAF, Microsoft Security certifications (e.g. SC-100 Cybersecurity Architect Expert), or equivalent. Experience working within a global enterprise environment, navigating complex stakeholder landscapes and multi-region security requirements. Familiarity with cloud security posture management (CSPM) and cloud workload protection platforms (CWPP). Experience with security automation and infrastructure-as-code approaches to security control deployment. Knowledge of Microsoft Sentinel and their integration into broader detection and response architectures. Knowledge of Qualys VMDR and WAS for vulnerability and web application management and detection. Knowledge of Netskope SASE (Secure Access Service Edge) solution to combine networking and security services into a single architecture, enabling secure access to web, cloud, and private applications.

#LI-NM1#LI-Hybrid

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against HH Global's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on HH Global's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    HH Global's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.