Enterprise Security Architect Lead – Chalhoub Group

Chalhoub Group is hiring an Enterprise Security Architect Lead in Dubai. Chalhoub Group is a long-established luxury and lifestyle retail group in the Middle East, operating a large network of stores alongside e-commerce sites and mobile apps across the region. A business of that size, handling customer data, payments and supply chains across multiple countries and channels, needs a coherent security architecture, and this role is responsible for shaping it.

The posting outlines several focus areas. You will track emerging technologies and evolving cyber threats to inform the group’s security architecture strategy, embed Security by Design across the Secure Software Development Lifecycle (SSDLC), and work across areas including Zero Trust Architecture, cyber risk management and security governance. In practice, that typically means defining security architecture principles, standards and reference patterns; reviewing designs for new systems, cloud services and integrations; guiding engineering teams on secure design; and making sure security controls are built in from the start rather than added later.

As a Lead, you will also influence senior stakeholders across technology and the business, explaining risks clearly and helping prioritise investment. Retail and e-commerce bring particular security considerations, such as protecting customer data and payments, securing omnichannel platforms and APIs, managing third-party and supplier access, and complying with regulations in multiple countries. Cloud security, identity and access management, and data protection are likely to be central themes.

The role suits a senior security architect with broad technical depth, hands-on experience implementing Zero Trust and secure SDLC practices, strong knowledge of security frameworks, and the communication skills to guide both engineers and executives.

Security architecture determines how well an organisation's defences hold up as it grows and changes. For a retailer with stores, websites, apps and partners across many markets, weak architecture creates gaps that attackers can exploit, while strong architecture makes protection consistent and scalable. An Enterprise Security Architect Lead reduces risk by ensuring new systems and integrations are designed securely from the outset, which is far cheaper and more effective than fixing problems after deployment. Embedding security in the software development lifecycle helps teams ship faster with fewer vulnerabilities. A Zero Trust approach limits the damage of any single breach by verifying every access request, which is especially important with remote access, cloud services and third-party connections. Protecting customer data and payments safeguards trust and helps avoid regulatory penalties and reputational damage. Clear security governance and risk management also help leadership prioritise investment wisely. Overall, strong security architecture supports Chalhoub Group's digital growth while protecting the business and its customers.

Leading enterprise security architecture at Chalhoub Group places you at the centre of a large, multi-country, omnichannel business undergoing continued digital growth. You will shape strategy, standards and designs across cloud, applications, identity and infrastructure, building a broad and senior profile that is in high demand. Experience implementing Zero Trust and secure SDLC practices at enterprise scale is particularly valuable as organisations everywhere move in this direction. Working closely with technology leaders and business stakeholders develops your strategic communication and influencing skills, which are essential for roles such as head of security architecture, deputy CISO or CISO. Retail and e-commerce security brings distinctive challenges, from payment protection to supplier access, broadening your expertise beyond more traditional sectors. Chalhoub Group's regional presence also exposes you to different regulatory environments and markets. The role encourages continuous learning about emerging technologies and threats, keeping your skills current in a rapidly evolving field. You will also have the opportunity to mentor engineers and build a security-minded culture across teams, leaving a lasting impact on how the organisation builds technology. For an experienced security architect ready to lead, this role offers significant influence, visibility and long-term career growth. It is a role with a long reach across the whole group.

• Bachelor’s degree in computer science, information security, engineering or a related field
• Extensive experience in information security, with significant time in security architecture roles
• Hands-on experience designing and implementing Zero Trust Architecture
• Strong knowledge of secure SDLC, threat modelling and DevSecOps practices
• Expertise in cloud security, identity and access management, network and application security
• Familiarity with frameworks such as NIST CSF, ISO 27001, CIS Controls and PCI DSS
• Experience in cyber risk management and security governance
• Certifications such as CISSP, SABSA, CCSP or TOGAF are an advantage
• Excellent communication skills with technical teams and senior stakeholders