Looking for a job

Andrew Goets

@andrewgoets

Cybersecurity Architect at Vision Bank, applying STRIDE threat modelling to AI security and organisation-wide cyber initiatives.

Saudi Arabia

Message

At Vision Bank, I define end-to-end security architectures and lead cyber initiatives spanning AI Security for Conversational Banking, PCI, and secure CI/CD pipelines. I also develop STRIDE threat models, using AI to scale and accelerate threat modelling and risk assessments.

At Old Mutual, I worked on AWS and Azure security architecture and led or co-led transformation programmes. I also enforced IEC 62443-4-1/4-2 standards in secure-by-design procurement and integration processes.

At TymeBank, I was part of the team that launched TymeDigital Bank and served as Security Lead for PCI. I contributed to cloud transformation, CI/CD security, and the bank’s SIEM, SOAR, DLP, and IAM uplift.

Across banking and industrial environments, I’ve designed enterprise security architectures and supported security governance, risk assessments, and compliance. My credentials include SABSA Chartered Security Architect (SCPA), CISSP, and AWS Certified Cloud Practitioner.

Experience

Work history, roles, and key accomplishments

Current

Senior Manager – Cybersecurity Architect

Current

Vision Bank

Dec 2023 - Present (2 years 10 months)

Lead and develop complete STRIDE threat models to enforce security requirements and address identified risks, as part of a 30% KPI for AI. Conduct cyber design reviews of new systems proposals throughout the project lifecycle.

Lead Security Architect – Digital

Old Mutual

Jul 2020 - Nov 2023 (3 years 4 months)

Security Architect for Architecting in AWS and Azure, including security design, security zones, key management, WAF and DDoS, and Security Hub. Conducted cyber design reviews and assessed security threats using TOGAF, SABSA, NIST, and ISO 27001.

AWS Azure Security Architecture TOGAF SABSA NIST ISO 27001 ISA IEC 62443 API Security CI CD Cloud Transformation Data Protection Threat Modeling Risk Assessment Governance Vendor Management

Security Architect

TymeBank

Jul 2017 - Dec 2020 (3 years 5 months)

Security Architect for TymeDigital Bank, part of the team that launched the digital bank. Led organisation-wide cyber initiatives including PCI, CI/CD secure pipeline, cloud transformation, data protection, SIEM, SOAR, NAC, DRM, DLP and IAM uplift.

AWS Security Architecture PCI CI CD Cloud Transformation Data Protection SIEM SOAR NAC DRM DLP IAM Threat Modeling Security Policies Regulatory Compliance

Security Governance Specialist

Integrove

Mar 2020 - Sep 2020 (6 months)

Reviewed current and proposed information systems for compliance with obligations and provided advice to governance. Carried out risk assessments and coordinated development of countermeasures and contingency plans.

Security Governance Compliance Risk Assessment Business Continuity IT Compliance Policy Development

Lead Security Architect

CIPC (South Africa)

Oct 2018 - Apr 2019 (6 months)

Set standard enterprise security architecture deployments for Secure Web services, Identity and Authentication Governance & Enterprise Data Security. Created Cyber Security Reference Model and ensured alignment into ISMS Framework and GWEA Enterprise Architecture.

Security Architecture Identity and Authentication Enterprise Data Security Gap Analysis ISMS Enterprise Architecture Risk Assessment Security Standards

Lead Security Architect

Nedbank

Sep 2015 - Mar 2017 (1 year 6 months)

Produced detailed component specifications and translated these into detailed designs for implementation. Evaluated and undertook impact analysis on major design options and assessed and managed associated risks.

Security Architecture SABSA TOGAF Bredemeyer Zachman ISO 27001 SOX PCI DSS Risk Assessment Vulnerability Management Enterprise Architecture Cloud Security Office 365 Azure AD DAM SIEM SOAR DLP IAM

Security Architect

Sasol

Jan 2014 - Aug 2015 (1 year 7 months)

Developed and maintained Technical Security Architecture for information and communication technology systems. Established Security Architecture principles, standards, guidelines and roadmap for applications, database and infrastructure.

Security Architecture OT Security ISA IEC 62443 Network Segmentation Purdue Model Framework Security Policies Risk Assessment LAN WAN VPN Firewalls PKI SIEM DLP Secure Remote Access Database Security Intrusion Prevention

Principal Security Consultant

BPMetrics Ltd

Jun 2013 - Dec 2013 (6 months)

Coordinated all aspects of executing the security contract at assigned locations and served as first point of contact for security professionals. Conducted risk assessments and identified appropriate controls to reduce risk.

Security Consulting Risk Assessment ISO 27001 PCI DSS SOX HIPAA Security Awareness Incident Management Security Architecture SABSA SOA Data Protection Network Access Control Content Filtering Mobile Device Management Cryptography

Middle Manager – Group IS Communications Security Architect

Standard Bank Group

Aug 2009 - May 2013 (3 years 9 months)

Consults with senior IT and business leaders regarding information security posture and responsible for designing and developing strategic architectures. Set and administered standards for the Group's overall IT security/network architecture.