Cyber Security Enterprise Architect

Siemens Energy; Gurugram District; On-site; INR 4,000,000 - 8,000,000; Full time

Job summary

Siemens Energy is seeking a Cyber Security Enterprise Architect to lead global security strategy and architecture across IT and OT. This Expert Professional role defines security direction within the central Enterprise Architecture team and guides complex security implementations.

You will drive security-by-design, risk management, and alignment with ISO 27001, NIST CSF, IEC 62443, and Zero Trust principles, partnering with cross-functional teams to secure digital transformation.

Qualifications

• Extensive experience designing security architectures for IT and OT environments.
• Deep knowledge of cloud security (AWS/Azure) and risk management.
• Advanced professional certifications expected (e.g., CISSP, CISM).

Responsibilities

• Analyze cyber security trends, threats, and regulatory requirements to evolve security architecture.
• Define and communicate target Cyber Security Architecture vision aligned with business strategy.
• Develop and maintain the Cyber Security Architecture roadmap and reference architectures.
• Establish architecture principles, guardrails, and design patterns across apps, infra, cloud, data, AI, OT, and IoT.
• Drive integration of security requirements into governance, portfolio management, and investments.
• Lead incident escalation as senior technical authority and mentor engineers.

Skills

Cyber security architecture

IAM

Zero Trust

Cloud security

Risk management

SIEM

OT security

Security monitoring

AI security

Regulatory alignment

Education

Bachelor's degree in Computer Science or related

Master's degree in Cybersecurity or related

Tools

AWS

Azure

ISO 27001

NIST CSF

IEC 62443

Job description

How to contribute to our vision

This role is a replacement for business continuity, filling a critical position as a Cyber Security Enterprise Architect within the central Enterprise Architecture team. As an Expert Professional, the position is responsible for defining, co-developing, and leading the implementation of the cybersecurity strategy and architecture for Siemens Energy on a global scale. To fulfill this strategic objective, the role is structured around three core pillars: cyber security strategy and architecture governance, secure digital transformation (incl. cloud security, OT/IT convergence, and AI security) and Technical Leadership & Solution Oversight, which entails providing expert guidance on security implementation and acting as a top-tier authority on complex security matters. Given the focus on strategic design and expert-level guidance, the ideal candidate will be a recognized master in cybersecurity architecture. This requires extensive experience in experience designing security architectures across both Enterprise IT and Operational Technology (OT) environments in critical infrastructure, utilities, manufacturing, or energy sectors. It also requires deep knowledge of cloud security (AWS/Azure), and proven expertise in areas like risk management, SIEM, and Identity and Access Management. Advanced professional certifications are expected.

What You Need To Make a Difference

• 40% Enterprise Security Strategy & Architecture
  • Analyze emerging cyber security trends, threats, regulatory requirements, and technology advancements to continuously evolve the enterprise security architecture and strengthen the organization's cyber resilience.
  • Define and communicate the target Cyber Security Architecture vision across the enterprise, ensuring alignment with business strategy, digital transformation initiatives, regulatory obligations, and risk appetite
  • Develop and maintain the Cyber Security Architecture roadmap, assessing current-state capabilities and defining target-state architectures, transition plans, and investment priorities.
  • stablish enterprise-wide security architecture principles, standards, guardrails, reference architectures, and design patterns covering applications, infrastructure, cloud platforms, data platforms, AI solutions, Operational Technology (OT), and IoT environments.
  • rive the integration of cyber security requirements into enterprise architecture governance, technology portfolio management, and investment decision processes.
• 30% Secure Digital Transformation
  • Drive security-by-design and privacy-by-design across all business and technology initiatives, ensuring cyber security requirements are integrated into solution delivery from inception to deployment.
  • Lead architecture assessments and evaluate alternative technology solutions, balancing business value, security risk, operational resilience, scalability, compliance, and cost.
  • Partner with Enterprise Architects, Solution Architects, Security Operations, Infrastructure, Application Development, Data, AI, and OT teams to ensure consistent implementation of security architecture standards.
  • Define the security architecture framework for cloud, hybrid-cloud, and edge computing environments, including identity, network security, workload protection, encryption, and monitoring capabilities.
  • Shape the strategic direction for Identity and Access Management (IAM), Zero Trust Architecture, Privileged Access Management (PAM), Cyber Defense, and Security Monitoring capabilities.
• 30% Technical Leadership & Solution Oversight
  • Serve as the senior technical authority and escalation point for complex security incidents, investigations, and architectural challenges.
  • Support Executive Management and Digital Transformation leadership by providing strategic guidance on cyber security risks, mitigation strategies, and technology investment priorities.
  • Ensure alignment with relevant industry standards and frameworks such as ISO 27001, NIST Cybersecurity Framework, IEC 62443, NIS2, CIS Controls, and Zero Trust principles.
  • Mentor and coach architects and technology leaders on cyber security best practices, architecture standards, and emerging security technologies.
  • Drive the integration of cyber security requirements into enterprise architecture governance, technology portfolio management, and investment decision processes.

Certifications

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)

Education

• Bachelor's or Master's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Extensive experience (Minimum 12+ years) in IT security, with a significant focus on enterprise architecture and strategic security design.
• Proven experience in a senior or lead architect role, developing and implementing security strategies for a large, global organization.

Skills

• Technical Security Expertise
  • Security Architecture
  • Identity & Access Management
  • Zero Trust Architecture
  • Cloud Security
  • Application Security
  • Data Security
  • OT/ Industrial Security
  • Cyber Resilience & Disaster Recovery
  • AI Security & Responsible AI
  • Security Monitoring & Threat Detection
  • Cloud knowledge (AWS/ Azure) and their security services
  • Understanding security frameworks and regulatory requirements: ISO 27001, NIST, Cybersecurity Framework IEC 62443, NIS2, CIS Controls, GDPR, Zero Trust principles
• Leadership & Communication
  • Excellent stakeholder management and communication skills with the ability to translate complex technical topics into business-focused recommendations and executive decision material.
  • Strong consulting, influencing, and facilitation skills, with the ability to drive alignment across business leaders, technology teams, and external partners.
  • Proven ability to lead cross-functional teams and mentor architects within a global enterprise environment.
  • Open-minded, collaborative, and passionate about continuous learning and technology innovation.