Information Security Architect

Job Description

Responsibilities Enterprise Security Architecture: Design and implement security solutions for enterprise IT and software products. Cloud Security: Secure applications and infrastructure on AWS, Azure, and GCP using cloud-native security controls. Security Frameworks & Compliance: Ensure compliance with ISO 27001, NIST CSF, CIS Controls, PCI DSS, GDPR, SOC 2 and other regulatory requirements. Application Security: Integrate security into the SDLC, perform threat modelling, and recommend secure coding best practices. Identity & Access Management (IAM): Design and enforce robust authentication and authorization mechanisms (SSO, MFA, Zero Trust). Threat & Vulnerability Management: Assess, identify, and mitigate vulnerabilities in enterprise IT and cloud environments. Security Operations & Incident Response: Develop monitoring strategies, SIEM integration, and incident response plans. DevSecOps & Automation: Implement security automation tools in CI/CD pipelines. Risk Assessment & Governance: Conduct security risk assessments and align strategies with business goals. Develop and review the installation requirements for LANs, WANs, VPNs, routers, firewalls, and similar network devices Research and design public key infrastructures, certification authorities, and digital signatures, ensuring all personnel have access appropriate to their need and role in the organization Experience and Skills Required 8 -15 + years of experience in information security with a focus on security, performance, and reliability. Experience with the application of firewall concepts and functions. Experience with the installation, integration, and optimization of system components. Experience designing architectures and frameworks. Experience in areas such as identity and access management, application security, cryptography, secure system development, security incident management, and/or vulnerability management and penetration testing Experience implementing security controls to improve system security. Knowledge of security implementations and current IT risks. Excellent problem solving, communication, and interpersonal skills. Certifications preferred : CISM, CCSP (for cloud security) AWS/Azure/GCP Security Specialty. OSCP, CEH (preferred but not mandatory