Security Architect

 About The Role  

Project Role :Security Architect

Project Role Description :Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :Governance Risk Compliance (GRC)

Good to have skills :NA
Minimum 5 year(s) of experience is required

Educational Qualification :15 years full time education
Summary:As a Security Engineer, you will apply your security skills to design, build, and protect enterprise systems, applications, data, assets, and people. A typical day involves collaborating with various teams to implement security measures, conducting assessments to identify vulnerabilities, and ensuring that all systems are fortified against potential cyber threats. You will also engage in continuous monitoring and improvement of security protocols to safeguard sensitive information and maintain compliance with industry standards. Roles & Responsibilities:- Expected to be an SME.- Collaborate and manage the team to perform.- Attention to detail- Analytical mindset- Problem-solving and process improvement mindset- Ability to think outside the box- Challenge the status quo- Work independently - Excel & data analysis pivot tables, lookups, formulas- Good understanding of controls frameworks (e.g., NIST, CIS, ISF SGOP)- Responsible for team decisions.- Engage with multiple teams and contribute on key decisions.- Provide solutions to problems for their immediate team and across multiple teams.- Conduct regular security assessments and audits to identify vulnerabilities and recommend improvements.- Develop and implement security policies and procedures to ensure compliance with regulations.Tools & Technologies:- Active Directory- Entra ID- CyberArk- SailPoint Identity Security Cloud- Multi-Factor-Authentication (MFA)- Single Sign-On (SSO)- ADManager Plus / ADAudit Plus- SAP Access Control (GRC)- SAP ECC- SAP S/4 HANA Professional & Technical
Skills:

-
Must To Have Skills:

Proficiency in Governance Risk Compliance (GRC).- Solid understanding of RBAC principles and ability to support role design and maintenance across systems, including AD, Entra ID, and SailPoint- Sollid understanding of identity lifecycle processes and experience with executing them within both on-premises (Active Directory) and cloud (Entra ID) environments- Proficient in privileged access management with experience in reviewing and monitoring privileged access in CyberArk, including validating safe structures and ensuring appropriate account ownership- Hands-on involvement in periodic access reviews in SailPoint, including campaign setup, tracking, and exception handling- Working knowledge of Segregation of Duties (SoD) concepts and ability to assist with conflict identification and remediation, especially within SAP and SailPoint- Experience with supporting internal/external audits by preparing evidence and responding to findings- Capable of generating governance and compliance reports from IAM systems, tracking remediation tasks, and escalating issues when needed- Familiarity with NIST, CIS, and ISF SGOP frameworks and applying them to IAM compliance operations.- Strong understanding of risk management frameworks and compliance standards.- Experience with security assessment tools and methodologies.- Knowledge of incident response and disaster recovery planning.- Familiarity with regulatory requirements such as GDPR, HIPAA, and PCI-DSS.
Additional Information:- The candidate should have minimum 5 years of experience in Governance Risk Compliance (GRC).- This position is based at our Bengaluru office.- A 15 years full time education is required. Qualification 15 years full time education