Head of Cyber Security Architecture

Ivector; Pune District; Hybrid; INR 4,000,000 - 7,000,000; Full time

Job summary

Ivector seeks a senior Security Architect to lead and mentor a team of security architects across strategic programmes. You will own architecture principles, standards, roadmaps, and governance, ensuring that decisions translate into implemented controls with clear ownership and measurable outcomes.

You will drive delivery of enterprise security capabilities (SIEM, WAF, PIM/PAM, DLP, email and mobile app security) and lead threat modelling, design assurance, and operational remediation

Qualifications

• Bachelor's degree in cybersecurity, CS, IT, engineering or related field; master's preferred.
• Minimum 12 years of progressive cybersecurity experience with security architecture/enterprise security.
• Demonstrated success leading Security Architects in a complex enterprise.
• Delivery experience implementing enterprise security capabilities: SIEM, WAF, PIM/PAM, DLP, email security, mobile app security.

Responsibilities

• Lead the Security Architecture function and mentor/allocate a team of Security Architects across strategic programmes and technology initiatives.
• Own security architecture principles, standards, reference architectures, patterns, roadmaps, and exception governance.
• Ensure architecture decisions translate into implemented controls with ownership, acceptance criteria, testing evidence, operational handover, and measurable outcomes.
• Lead governance of SIEM, WAF, PIM, DLP, email security, mobile app security, and other enterprise security capabilities.
• Establish and run security architecture review forums, design assurance, threat modelling, risk acceptance, and remediation tracking.
• Lead CTEM across scoping, discovery, prioritisation, validation, mobilisation, remediation governance, and executive reporting.

Skills

Security architecture

Security engineering

Enterprise security

Threat modelling

Leadership

Education

Bachelor's degree in cybersecurity / CS / IT / engineering

Master's degree preferred

Tools

SIEM

WAF

PIM / PAM

DLP

Job description

Role & responsibilities:

• Lead the Security Architecture function and manage, mentor, and allocate a team of Security Architects across strategic programmes and technology initiatives.
• Own security architecture principles, standards, reference architectures, patterns, roadmaps, and exception governance.
• Ensure architecture decisions are converted into implemented controls with clear ownership, acceptance criteria, testing evidence, operational handover, and measurable outcomes.
• Lead the architecture and implementation governance of SIEM, WAF, Privileged Identity Management (PIM), Data Loss Prevention (DLP), email security, mobile application security, and other enterprise security capabilities.
• Establish and run security architecture review forums, design assurance, threat modelling, risk acceptance, and remediation tracking.
• Lead CTEM across scoping, discovery, prioritisation, validation, mobilisation, remediation governance, and executive reporting.

Preferred candidate profile:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field; a relevant master's degree is preferred.
• Minimum 12 years of progressive cybersecurity experience, including substantial responsibility in security architecture, security engineering, or enterprise security technology implementation.
• Demonstrated experience leading Security Architects or senior security engineering professionals in a complex enterprise environment.
• Proven delivery experience implementing and operationalising multiple enterprise security capabilities, including SIEM, WAF, PIM or PAM, DLP, email security, and mobile application security.
• Experience leading security architecture reviews, threat modelling, design assurance, technology selection, vendor evaluation, implementation governance, testing, and transition to operations.
• Hands-on understanding of CTEM, vulnerability management, attack-surface management, security control validation, penetration testing, and risk-based remediation governance.

Preferred Certifications

• CISSP and/or ISSAP; SABSA; TOGAF; CCSP; CISM; GIAC architecture, cloud, incident response, or penetration-testing certifications; relevant cloud security certifications from Microsoft Azure, Amazon Web Services, or Google Cloud.