Enterprise Application Assurance Architect

The Enterprise Application Assurance Architect  is part of the IT Enterprise Architecture (EA) team and is responsible for ensuring the security of Sonova’s application landscape. The role ensures that new and existing applications meet information security requirements and that risks are properly identified, documented, and managed according to Sonova’s security standards and regulatory expectations. 

The position focuses on assessing applications, identifying security design gaps, and recommending architectural controls aligned with enterprise architecture principles and security directives. 

More about the role : 

• Drive the evolution of enterprise security architecture in alignment with EA principles and security standards. 

• Perform security assessments for new applications, major changes, and vendors (including custom and SaaS solutions). 

• Review security documentation (e.g., ISO 27001, SOC 2, pen-test reports, architecture diagrams) and assess risks. 

• Identify security gaps and recommend risk-based remediation and security-by-design controls. 

• Document recommendations and support the risk management process, escalating issues when required. 

• Contribute to the Enterprise Architecture Review Board with security recommendations. 

• Collaborate with architects and cross-functional teams (Security, Legal, Data Privacy, IT Infrastructure, SecOps). 

• Support continuous improvement of security assessment processes and provide insights on risk trends and compliance. 

More about you : 

• 10+ years of IT experience, including security architecture or security engineering in enterprise environments. 

• Degree in Computer Science, Information Management, Business IT, or equivalent experience. 

• Security certification (e.g., CISSP, CISM) or equivalent professional experience. 

• Strong knowledge of security architecture, risk and compliance alignment, and audit-ready controls. 

• Broad understanding of application and integration security (IAM/PAM, cloud, data, network security, logging/monitoring, vulnerability management). 

• Experience reviewing technical security documentation and performing vendor or third-party security assessments. 

• Strategic thinker aligning business, risk, and security architecture. 

• Strong communicator simplifying complex security topics. 

• Pragmatic and solution-oriented approach. 

• Collaborative leadership in matrix environments. 

• Continuous learning mindset. 

• Professional proficiency in English.