Data Security Architect VP (Mumbai)

Talent HR Networks Private; Mumbai City; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Talent HR Networks Private based in Mumbai invites an accomplished Security Architecture & Design professional to define enterprise data protection architectures and embed Security-by-Design and Privacy-by-Design across the SDLC.

You will review solution architectures, conduct risk assessments, threat modelling, and govern security controls across data lifecycle, cloud, and on-premises environments. CISSP/CCSP etc preferred.

Qualifications

• 10–15 years of hands-on cybersecurity experience.
• Proven expertise in security architecture and design.
• Strong knowledge of data protection and regulatory compliance.

Responsibilities

• Define enterprise data protection reference architectures and security designs.
• Conduct architecture governance, risk assessments, and threat modelling.
• Support architecture review boards and security committees.
• Provide guidance on security controls across data lifecycle and cloud environments.

Skills

Security architecture

Threat modelling

Data protection

Governance & compliance

Cloud security

Security frameworks

Tools

Jira

Confluence

Job description

Job Description :

Security Architecture & Design professional responsible for defining enterprise Data Protection reference architectures, security design patterns, and embedding Security-by-Design and Privacy-by-Design across the SDLC and project lifecycle.

Experienced in reviewing solution architectures, defining security controls, conducting architecture governance, security risk assessments, threat modelling using STRIDE/PASTA, and supporting architecture review boards and security committees.

Strong expertise across the complete data lifecycle including data discovery, classification, storage, processing, sharing, retention, archival, and secure disposal, with proven ability to identify risks and implement appropriate protection mechanisms.

Hands-on experience with Microsoft Purview Information Protection, DLP across endpoint/email/cloud/network, IRM, encryption, tokenization, data masking, database security, KMS, certificate lifecycle management, secrets management, HSM, CASB, and cloud-native data protection.

Skilled in security architecture assessments, design workshops, HLD/LLD reviews, defining mandatory security controls, identifying design gaps, recommending remediation, implementation guidance, and data protection-focused threat modelling.

Solid governance and compliance expertise covering Enterprise Data Security and Cryptography Standards, Secure Architecture Evaluation, security guardrails, exceptions, GDPR, DPDP, MAS, DORA, and JFSA regulatory requirements.

Proficient in NIST, ISO 27001, CIS Controls, enterprise security frameworks, network security, application security, cloud security, data protection, visibility, access controls, and security assessment methodologies.

Experienced in creating network architecture diagrams, system architecture diagrams, data flow diagrams, security control mappings, technical specifications, security procedures, and Architectural Decision Records using Jira and Confluence.

Brings 10-15 years of hands-on cybersecurity experience, preferably supported by CISSP, CCSP, Microsoft SC-100/SC-400, TOGAF, or SABSA certifications, with strong analytical, problem-solving, documentation, and stakeholder management skills.

Ability to work independently in Agile, cross-functional environments, manage multiple priorities, maintain high attention to detail and quality, collaborate with security engineering teams, support audits and compliance reporting, and provide strategic security guidance to stakeholders.