Architect - Design Assessment

Mindsprint Pte. Ltd.; Bengaluru; On-site; INR 2,800,000 - 4,400,000; Full time

Job summary

Mindsprint Pte. Ltd. seeks an Information Security Risk and Compliance Lead to safeguard cloud infrastructure (GCP/AWS) and applications, aligning with ISO 27001, HIPAA and HITRUST requirements. The role covers security assessments, risk mitigation and architecture reviews.

You will collaborate with engineering and security teams across geographies, own control implementations, and ensure secure design and compliance across IAM, data, network and cloud services.

Qualifications

• 10-12 years of experience in Information Security, specializing in reviewing cloud infrastructure and applications.

Responsibilities

• Ensure the security posture of cloud environments (GCP and AWS) by identifying and mitigating risks.
• ,

Skills

Cybersecurity principles

Security architecture

Cloud security (GCP/AWS)

Threat modelling (STRIDE/PASTA)

IAM & access control

Data security & encryption

Logging & monitoring

Zero Trust

Tools

Okta

Entra ID

GCP Console

AWS Security Hub

CSA CCM

Job description

8 - 12 Years

Permanent Full Time

Job Description

Position : Information Security Risk and Compliance

Grade : E2

Shift : 1st & 2nd shift

Position Summary:

The Security Architecture and Design Assessment Lead is responsible for ensuring the security of cloud infrastructure(GCP and AWS) and applications through meticulous assessment and implementation of robust security measures. The role needs to have a strong understanding of security requirement in industry such healthcare, Pharma, patient services and life sciences and good understanding of ISO 27001 , HIPAA and HITRUST .

Job Description:

• Ensure the security posture of cloud environments (GCP and AWS) by identifying and mitigating risks.
  
• Conduct security assessments of GCP and other cloud environments (AWS), including applications and infrastructure.
• Collaborate with cloud application architects/developers, system/network administrators, and stakeholders to ensure secure cloud design.
• Review changes in Application Design and assess security controls , provide recommendations and validate the implementation of security controls across IAM , Network Security , Data Security and Infrastructure Security .
• Provide guidance on cloud security controls and ensure adherence to secure cloud practices.
• Work with key stakeholders across engineering groups to align architecture decisions with security requirements.

Profile Description:

• Strong expertise in cybersecurity principles and best practices
  
• Thorough understanding of various security standards, framework, and certifications/attestations e.g., ISO 27001, HIPAA, HITRUST.
  
• 10-12 years of experience in Information Security, specializing in reviewing cloud infrastructure and applications.
  
• Proficiency in Cyber Security Risk Assessment, Cloud Security Assessment, Defense in Depth, and Security Architecture patterns.
  
• Hands-on experience with Threat Modelling techniques such as STRIDE, PASTA, and familiarity with IAM, App Sec, SDLC, Data Security, Network Security, Encryption, Logging & Monitoring.
  
• Experience with Okta and Entra ID is preferable
  
• Strong experience in assessing and implementing security controls for GCP & AWS cloud platforms and resources
  
• Strong experience assessing and recommending security controls for Container based applications.
  
• Experience in Assessing and Recommending Security controls for Data Analytics , Data Warehouse and AI based applications
  
• Familiarity with GCP Command Center, AWS Security Hub and mitigating vulnerabilities.
  
• Experience with Cloud Access Security Broker, CSPM, CWPP, PaaS, and IaaS security requirements in Azure, GCP, AWS, and AKS.
  
• Individual handling of design/solution reviews across cloud and SaaS providers, ensuring security due diligence.
  
• Understanding of Cloud Security Alliance Cloud Control Matrix (CSM) and CSA Security guidance.
  
• Management of security projects and technical assessments across multiple geographies.
  
• Strong analytical and troubleshooting skills, along with excellent communication and interpersonal abilities.
  
• Experience with cloud infrastructure like GCP and AWS and familiarity with concepts like Zero Trust Architecture, Cloud Security, Firewall rule reviews, and Conditional Access.
  
• Scripting knowledge (e.g., Powershell) is advantageous, and CISSP and CCSP certifications are a plus.

We are Mindsprint!

A leading-edge technology and business services firm that provides impact driven solutions to businesses, enabling them to outpace speed of change. For over three decades we have been accelerating technology transformation for the Olam Group and their large base of global clients.

Working with leading technologies and empowered with the freedom to create new solutions and better existing ones, we have been inspiring businesses with pioneering initiatives.

Awards bagged in the recent years:

• Best Shared Services in India Award by Shared Services Forum – 2019
• Asia’s No.1 Shared Services in Process Improvement and Value Creation by Shared Services and Outsourcing Network Forum – 2019
• International Innovation Award for Best Services and Solutions – 2019
• Kincentric Best Employer India – 2020
• Creative Talent Management Impact Award – SSON Impact Awards 2021
• The Economic Times Best Workplaces for Women – 2021 & 2022
• #SSFExcellenceAward for Delivering Business Impact through Innovative People Practices – 2022

For more info: https://www.mindsprint.org/

Follow us in LinkedIn: Mindsprint

Required abilities

• Physical:
• Other:

Specific requirements

• Travel:
• Vehicle:
• Pay Rate:
• Contract Types:
• Time Constraints:
• Compliance Related:
• Union Affiliation:

Job Snapshot

Updated Date

30-08-2024

Job ID

J_876

Organisation Unit

Cybersecurity & Privacy

Location