Director Security Architect

Promaynov Advisory Services Pvt. Ltd; Bengaluru; On-site; INR 5,000,000 - 8,000,000; Full time

Job summary

Promaynov Advisory Services Pvt. Ltd. is seeking a Senior Enterprise Security Architect to own end-to-end security architecture across Microsoft Entra ID, Defender, and Purview.

The role requires leadership of architects, consultants and PMs while guiding identity, endpoint, cloud security and data protection workstreams. You will review baselines, SOPs, runbooks, and health reports, and you will lead knowledge transfer sessions.

Qualifications

• 15+ years of cybersecurity experience.
• 8+ years in Enterprise Security Architecture roles.
• Proven experience leading large-scale enterprise security transformation programs.
• Strong hands-on expertise in Microsoft E5 Security and Microsoft Purview.
• Experience architecting and delivering implementations for 10,000+ endpoints/servers in multi-region environments.
• Experience managing leadership-level stakeholders, including CISOs, CIOs, Steering Committees, and Board Members.
• Ability to operate both at executive and hands-on technical levels.
• Experience leading migrations/consolidations from legacy security tools to Microsoft-native platforms.
• Designing Enterprise Sensitivity Label Taxonomy, Data Governance Frameworks, and DLP controls.

Responsibilities

• Own end-to-end target security architecture across Microsoft Entra ID, Defender, Purview.
• Define enterprise-wide standards for Architecture.
• Lead security architects, consultants, engineers, and project managers.
• Guide Identity, Endpoint Security, Cloud Security, and Data Protection workstreams.
• Review and approve Configuration Baselines, SOPs, Runbooks, Health, and Optimization Reports.
• Lead architecture-focused knowledge transfer sessions.
• Develop reusable architecture assets and best practices.
• Maintain KPI Dashboards and oversee architecture governance.

Skills

Enterprise security architecture

Security program leadership

Microsoft E5 Security

Purview

XDR modeling

RBAC

Zero Trust

Stakeholder management

Board communication

Migration governance

Tools

Microsoft Defender

Purview

Entra ID

MCAS

Job description

• Own end-to-end target security architecture across:
• Purview
• Lead security architects, consultants, engineers, and project managers.
• Guide Identity, Endpoint Security, Cloud Security, and Data Protection workstreams.
• Review and approve:
• Configuration Baselines
• SOPs
• Runbooks
• Health
• Optimization Reports
• Lead architecture-focused knowledge transfer sessions.
• Develop reusable architecture assets and best practices.

We are specifically looking for

Responsibilities

• Own end-to-end target security architecture across:
• Microsoft Entra ID
• Microsoft Defender
• Microsoft 365 Defender XDR
• Purview
• Define enterprise-wide standards for:
• Architecture
• Lead security architects, consultants, engineers, and project managers.
• Guide Identity, Endpoint Security, Cloud Security, and Data Protection workstreams.
• Review and approve:
• Configuration Baselines
• SOPs
• Runbooks
• Health
• Optimization Reports
• KPI Dashboards
• Lead architecture-focused knowledge transfer sessions.
• Develop reusable architecture assets and best practices.

Requirements

• 15+ years of cybersecurity experience.
• 8+ years in Enterprise Security Architecture roles.
• Proven experience leading large-scale enterprise security transformation programs.
• Strong hands-on expertise in Microsoft E5 Security and Microsoft Purview.
• Experience architecting and delivering implementations for 10,000+ endpoints/servers in multi-region environments.
• Experience managing leadership-level stakeholders, including CISOs, CIOs, Steering Committees, and Board Members.
• Ability to operate both at executive and hands-on technical levels.
• RBAC
• Zero
• XDR Correlation Models
• Data
• Security
• Must have experience leading migrations/consolidations from legacy security tools such as: CrowdStrike Checkpoint EDR Symantec DLP
• Sophos into Microsoft-native security platforms.
• Must have strong experience designing:
• Enterprise Sensitivity Label Taxonomy
• Data Governance Frameworks
• Information Protection Strategy
• DLP Control Frameworks
• Regulatory Compliance Controls
• Adaptive Protection Models
• Insider Risk Controls
• Troubleshooting critical production issues
• Resolving security configuration challenges
• Supporting stabilization and hypercare phases
• Acting as technical escalation point during complex deployments
• Candidate
• Acting as trusted advisor to CISOs and executive leadership.
• Leading board-level and steering committee discussions.
• Presenting architecture decisions and risk trade-offs.
• Managing scope, risk acceptance, escalations, and delivery challenges.
• Conducting workshops with Business Units and Compliance teams.
• Translating security architecture into business risk language.
• Wave-based deployment methodologies.
• Enterprise rollout governance.
• Hypercare and stabilization models.
• Stage-gate assessments.
• Architecture compliance reviews.
• Testing and validation sign-offs.
• Knowledge Transfer governance.
• Identity Security
• Entra
• Endpoint Security
• Microsoft Defender for Endpoint (MDE)
• Email Security
• Microsoft Defender for Office 365 (MDO)
• Cloud App Security
• MDCA / MCAS
• Identity Threat Detection
• MDI Extended Detection & Response
• Microsoft 365 Defender XDR
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• SC-200
• SC-300
• SC-400
• CISSP
• CISM
• TOGAF
• Experience within the
• Logistics
• Environments
• Critical
• OT/IT