Security Architect Needed — Core Banking Solution architecture hosted in KSA

Security Architect Needed — Core Banking Solution Architecture (Temenos T24) We are a newly established SAMA-licensed commercial bank in Saudi Arabia deploying Temenos T24 as our core banking system on a cloud infrastructure. We are looking for an experienced Security Architect to support us in designing and documenting a security architecture aligned to the SAMA Cybersecurity Framework (CSF), NCA ECC-2, and SDAIA/PDPL requirements. --- Scope of Work The engagement covers the following dimensions: 1. Application Security - Security architecture for Temenos T24 web channel, API layer, and Open Banking integrations - Application-level controls: IAM, MFA, PAM, TLS, PKI, and secrets management - Secure SDLC recommendations and API security standards (FAPI/OAuth 2.0) 3. Technology Stack - Security controls mapping across the full technology stack (Temenos T24, cloud infrastructure, HRMS, payment channels, SWIFT/FinNet) - Tooling recommendations for SIEM, EDR, DLP, CSPM, WAF, and MSOC integration 4. Deployment Environment - Cloud deployment model (KSA-based cloud provider) - Security zone design: DMZ, perimeter, application, core banking, data, and cloud infrastructure layers - Data residency and sovereignty controls aligned to PDPL Article 29 5. Integrations - Secure integration patterns for third-party vendors. - Third-party risk and shared responsibility considerations 6. Expected Deliverables - High-Level Security Architecture diagram (end-to-end, with directional data flows) - Security Controls Framework mapped to SAMA CSF, NCA ECC-2, and PDPL - Security solution architecture narrative (suitable for SAMA regulatory.