Security Architect

Hi,

Wishes. GSN provides corporate search services, identifying and bringing talented professionals to meet the needs of IT and non-IT clients across India. The company has been supporting client hiring needs for over 20 years.

Currently we are actively hunting for Senior Security Architect for one of our MNC Client. Kindly find below the detailed Job Description for your better understanding.

Exp Range : 12 to 20 yrs

Work Location : Bangalore / Pune / Chennai

Work Mode : Hybrid

CTC Range : Rs 45 LPA to Rs. 50 LPA

*** Looking for SHORT JOINERS ***

Job overview :

As Senior Security Architect, you will be the senior technical adviser within the offshore consultancy team. Working under the technical direction of the UK Head of Service, who holds design authority, you will produce the security architecture, design and risk material that underpins the service, and provide technical leadership to the offshore engineers.

This is a design, review and advisory role. You will work within clients offshore consultancy team, outside the client's operational environment. You will not have access to the client's operational systems or data and will not make live changes. Operational changes are implemented by UK-based, security-cleared personnel; your work provides the designs, analysis, recommendations and assurance that those changes depend on. You will work from information released to the team through clients controlled UK service boundary.

Essential skills:

• Enterprise security architecture across network, identity, endpoint, cloud and data security domains.
• Designing logging and SIEM integration architectures, including log source definition and retention requirements.
• Applying risk assessment methods such as ISO/IEC 27005 and NIST SP 800-30.
• Working knowledge of the NIS Regulations, NCSC CAF, ISO/IEC 27001, NIST CSF and CIS Controls.
• Reviewing proposed changes for architectural and security risk and producing clear, evidence-based recommendations.
• Excellent written communication for executive, governance and regulator-facing documentation.

Responsibilities:

• Produce and maintain security architecture and design documentation (high-level and low-level designs) for the client's security tooling estate, for approval by the UK Head of Service.
• Carry out architecture and risk reviews of proposed high-risk changes (firewall, intrusion prevention, gateway, privileged access and application control) before they are presented to the client's Change Advisory Board.
• Define logging and audit requirements for in-scope security tools, including log sources, feed requirements for the client's retained SIEM, and a retention architecture aligned with client policy and regulatory obligations.
• Assess and recommend tooling and approaches for PKI and secrets management.
• Produce NIS Regulations and NCSC Cyber Assessment Framework (CAF) alignment assessments and contribute evidence to the client's regulatory reporting.
• Prepare inputs for the client's governance, risk, and compliance (GRC) reporting on the enterprise's security status.
• Develop risk treatment plans in line with client policy and industry best practice and maintain inputs to the security risk register.
• Prepare technical content and risk papers for the client's cyber security governance board, in support of the UK Head of Service and the Lead Information Risk Manager.
• Maintain the master set of security architecture diagrams and ensure that diagrams produced by the engineering team are consistent and up to date.
• Identify and assess continual improvement opportunities, including benefit-cost appraisal and sequencing into quick wins, foundational change and strategic uplift.
• Apply appropriate consideration of operational technology (OT) and IT/OT boundary risk in all architecture and design work.
• Provide technical leadership, peer review and mentoring to the Lead Security Engineer, Security Engineers and Vulnerability and Patch Manager.
• Support the growth of Clients Cybersecurity Practice through knowledge sharing, technical contribution and client-facing delivery excellence.

Required Qualification :

• 12+ years in IT and cybersecurity, including 6+ years in security architecture for enterprise or CNI environments.
• Experience producing architecture, design and risk artefacts for regulated organisations.
• Experience supporting governance boards, risk registers and GRC reporting.
• Experience working with multi-supplier environments and managed security service providers.
• CISSP, CISSP-ISSAP or SABSA Chartered Foundation (at least one required).
• TOGAF, a cloud security certification (e.g. CCSP, AZ-500, AWS Security Specialty) or GICSP/ISA/IEC 62443 certification would be advantageous.

*** Looking for SHORT JOINERS ***

If this role excites you and aligns with your aspirations, don't hesitate to call me @ 9840035825 directly or click APPLY ONLINE. Let's explore this opportunity together!

Thanks and Regards,

Ananth | GSN | +91.98400.35825 | Google review : https://g.co/kgs/UAsF9W