Richemont Security Enterprise Architect

Richemont is a Swiss-based luxury goods holding company that manages a portfolio of high-end maisons across jewellery, watches, leather goods and specialised luxury brands. As an employer, Richemont combines heritage craftsmanship with group-level corporate functions, supporting global operations, digital transformation and a strong emphasis on brand protection and client experience.

1. Define and maintain the global enterprise security architecture, aligning security strategy with Richemont's business objectives and technology roadmaps.
2. Develop and evangelise security reference architectures for cloud, hybrid and on‑premise environments, ensuring secure design patterns and reusable controls.
3. Lead threat modelling, architecture reviews and security risk assessments for major programmes and platform changes.
4. Design and govern identity and access management (IAM) frameworks, including authentication, authorization and privileged access controls.
5. Specify security requirements for application, data and infrastructure layers and translate them into technical controls and deployment patterns.
6. Collaborate with engineering, infrastructure, product and compliance teams to ensure secure implementation and operational readiness.
7. Drive adoption of Zero Trust principles, secure-by-design practices and automation for security configuration and compliance.
8. Evaluate and integrate security products and services (cloud security, CASB, SIEM, vulnerability management) and manage relationships with external vendors.
9. Produce architecture artefacts, roadmaps, standards and metrics; present recommendations to senior stakeholders and governance boards.
10. Mentor engineers and architects on secure architecture patterns and contribute to building internal security capability.

1. Proven track record as an enterprise or lead security architect in a complex, multi-national environment.
2. Deep technical understanding of cloud security, hybrid architectures and modern software delivery models.
3. Hands-on experience with identity and access management, privileged access, and federation technologies.
4. Familiarity with security frameworks and standards such as NIST CSF, ISO 27001 and secure SDLC practices.
5. Professional security certification preferred (e.g., CISSP, CISM, SABSA, TOGAF or equivalent).
6. Excellent stakeholder management and communication skills, with the ability to influence technical and non-technical audiences.

1. Cloud platforms: AWS, Microsoft Azure, Google Cloud Platform (GCP)
2. Identity platforms: Azure AD, Okta; protocols SAML, OAuth2, OpenID Connect
3. Zero Trust architecture and network segmentation
4. SIEM and monitoring solutions (e.g., Splunk, Azure Sentinel)
5. CASB, WAF and endpoint security technologies
6. PKI, TLS and encryption best practices
7. Threat modelling and secure design patterns
8. Infrastructure as Code and automation (e.g., Terraform, CI/CD security controls)
9. NIST CSF, ISO 27001 and data protection / privacy controls

Typically 8+ years in information security with at least 3–5 years in an enterprise architecture or lead architect capacity, including demonstrable experience delivering security architecture for cloud and complex hybrid environments in a global organisation.

Bachelor's degree in Computer Science, Information Security, Engineering or equivalent; Master's degree or advanced technical qualification preferred.

Richemont combines the rigor of a global corporate structure with the creative ethos of luxury maisons, valuing craftsmanship, discretion and long‑term brand stewardship. The workplace culture emphasises collaboration across regions, continuous learning and responsible innovation to protect heritage while enabling digital transformation.