Security Architect

Hi,

Wishes. GSN provides corporate search services, identifying and bringing talented professionals to meet the needs of IT and non-IT clients across India. The company has been supporting client hiring needs for over 20 years.

Senior Security Architect

Exp Range : 12 to 20 yrs

Work Location : Bangalore / Pune / Chennai

Work Mode : Hybrid

CTC Range : Rs 45 LPA to Rs. 50 LPA

***

Job overview :

Senior Security Architect

This is a design, review and advisory role.

Essential skills:

• Enterprise security architecture across network, identity, endpoint, cloud and data security domains.

• Designing logging and SIEM integration architectures, including log source definition and retention requirements.
• Applying

  risk assessment methods

  such as

  ISO/IEC 27005 and NIST SP 800-30

  .
• Working knowledge of the

  NIS Regulations, NCSC CAF, ISO/IEC 27001, NIST CSF and CIS Controls.

• Reviewing proposed changes for architectural and security risk and producing clear, evidence-based recommendations.
• Excellent written communication for executive, governance and regulator-facing documentation.

Responsibilities:

• Produce and maintain security architecture and design documentation (high-level and low-level designs) for the client's security tooling estate, for approval by the UK Head of Service.
• Carry out architecture and risk reviews of proposed high-risk changes (firewall, intrusion prevention, gateway, privileged access and application control) before they are presented to the client's Change Advisory Board.
• Define logging and audit requirements for in-scope security tools, including log sources, feed requirements for the client's retained SIEM, and a retention architecture aligned with client policy and regulatory obligations.
• Assess and recommend tooling and approaches for PKI and secrets management.
• Produce NIS Regulations and NCSC Cyber Assessment Framework (CAF) alignment assessments and contribute evidence to the client's regulatory reporting.
• Prepare inputs for the client's governance, risk, and compliance (GRC) reporting on the enterprise's security status.
• Develop risk treatment plans in line with client policy and industry best practice and maintain inputs to the security risk register.
• Prepare technical content and risk papers for the client's cyber security governance board, in support of the UK Head of Service and the Lead Information Risk Manager.
• Maintain the master set of security architecture diagrams and ensure that diagrams produced by the engineering team are consistent and up to date.
• Identify and assess continual improvement opportunities, including benefit-cost appraisal and sequencing into quick wins, foundational change and strategic uplift.
• Apply appropriate consideration of operational technology (OT) and IT/OT boundary risk in all architecture and design work.
• Provide technical leadership, peer review and mentoring to the Lead Security Engineer, Security Engineers and Vulnerability and Patch Manager.
• Support the growth of Clients Cybersecurity Practice through knowledge sharing, technical contribution and client-facing delivery excellence.

Required Qualification :

• 12+ years in IT and cybersecurity, including 6+ years in security architecture for enterprise or CNI environments.

• Experience producing architecture, design and risk artefacts for regulated organisations.

• Experience supporting governance boards, risk registers and GRC reporting.

• Experience working with multi-supplier environments and managed security service providers.

• CISSP, CISSP-ISSAP or SABSA Chartered Foundation (at least one required).

• TOGAF,

  a cloud security certification (e.g.

  CCSP, AZ-500, AWS Security Specialty

  ) or

  GICSP/ISA/IEC 62443 certification

  would be advantageous.

***

9840035825

Thanks and Regards,

Ananth