Security Architecture Review -Information Security

Position Purpose

The Information Security Architect is responsible for designing, implementing, and maintaining secure enterprise architecture to protect organizational assets. This role ensures that all IT systems and projects comply with established security policies, standards, and best practices. The architect works closely with cross-functional teams to integrate security into infrastructure, applications, and cloud environments, while supporting compliance and risk management initiatives. Closely work with IT teams, software developers, and business stakeholders to integrate security into the design and development lifecycle.

Position Responsibilities

High level Job description below:

• Design and maintain enterprise security architecture across on-premises, cloud, and hybrid environments.
• Conduct comprehensive security architecture reviews to identify vulnerabilities, assess risk, and improve system and application designs.
• Design, implement, and manage network and cloud security controls, including firewalls, WAFs, load balancers, IDS/IPS, and VPNs.
• Perform regular system and application risk assessments, including vulnerability scans, to detect and mitigate security risks.
• Collaborate with IT, DevOps, and infrastructure teams to ensure security best practices are embedded into system, application, and network designs.
• Evaluate, recommend, and implement security tools and technologies such as IAM, SIEM, encryption, endpoint protection, and cloud-native security solutions.
• Continuously monitor emerging threats, vulnerabilities, and technology trends; recommend enhancements to improve the organization's security posture.
• Ensure compliance with internal security policies, regulatory requirements, and industry standards (e.g., ISO 27001, NIST, PCI DSS, HIPAA).
• Support security incident response, vulnerability tracking, and remediation planning.
• Conduct gap analyses and support security audits and governance activities.
• Provide detailed security risk assessments, architecture documentation, and mitigation recommendations to technical teams and senior management.
• Suggest and drive implementation of security improvements to reduce organizational risk.
• Maintain documentation of architectural decisions, risk evaluations, and compliance findings.

Qualifications and Experience Requirement

Essential

• Bachelor's or Masters degree in any steam or in Computer Science, Information Security.
• Any one or two certification in security frameworks such as CISSP, ITIL, CISM, CISA, CRISC, ISO 31000, ISO 27001:2013 Lead Auditor /Implementation is preferred.

Essential

• Minimum 4-5 years of experience in information security
• Strong understanding of security concepts, system architecture, web and mobile application security, API security, including basic knowledge of network and cloud security, Knowledge of regulatory requirements.
• Knowledge on compliances like ISO27001:2013, PCI-DSS, RBI guidelines related to critical and payments application
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Well versed with emerging technologies, associated risks and associated controls to manage risks.

Threshold Competencies

Technical Expertise:

Problem-Solving:

Decision-Making:

Communication:

Leadership:

Leadership Competencies

Strategic Thinking:

Innovation:

Influence:

Relationship Building:

Change Management: