Lead - Security Architecture

ntrs; Pune District; On-site; INR 4,000,000 - 6,500,000; Full time

Job summary

Northern Trust in India is seeking a Security Architect to drive security initiatives across the organization. You will collaborate with stakeholders and IT teams to ensure security controls align with business goals.

With 10+ years in IT and 6+ in security, you will define security requirements, craft reference architectures, and lead threat modeling efforts using tools like Microsoft Threat Modeling Tool and SD Elements.

Qualifications

• 10+ years IT experience with security and architecture
• 3+ years cloud delivery on AWS/Azure/GCP
• Experience leading security initiatives and communicating risks to senior leaders
• Expert in infrastructure, application, network, IAM, data domains
• Knowledge of NIST/CSA CCM/CIS Controls and security engineering practices

Responsibilities

• Define security requirements and non-functional requirements to meet business objectives
• Lead the design of security solutions and reference architectures
• Develop and maintain security standards, patterns and guidelines
• Assess effectiveness of controls including data protection and IAM
• Research and promote new security technologies and maturity roadmaps
• Act as SME for security designs and configurations

Skills

Security architecture

Cloud security

Threat modeling

IAAS/PaaS/SaaS

Education

BE/Btech degree

Tools

Microsoft Threat Modeling Tool

SD Elements

Job description

About Northern Trust

As a global leader in innovative wealth management, asset servicing, asset management and banking services, Northern Trust (Nasdaq: NTRS) is proud to guide the world's most successful individuals, families, corporations and institutions.

Since 1889, we have aligned our efforts with our three guiding Principles That Endure: Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide.

With more than 135 years of financial experience and over 24,000 partners, we serve the world's most sophisticated clients using leading technology and exceptional service.

Security Architect role

Security Architect role is accountable for driving security initiatives for the organization. Under limited supervisions, you will work with a wide variety of business stakeholders and IT professionals (including different Security functions, Enterprise Architecture, Technology Infrastructure, and Cloud Engineering teams) to ensure organizational security needs/controls are aligned to support business goals and objectives.

Responsibilities

• Define security functional requirements and non-functional requirements to meet the business objectives of a solution
• Work with stakeholders in setting the technical direction, selection, and evaluating candidate security solutions
• Work with stakeholders to design and document the conceptual and detailed designs of security solutions
• Lead the development of security standards, reference architectures, patterns, and guidelines
• Assess effectiveness of security controls i.e. data protection, IAM, detective controls, infrastructure/network security, incident response. Work on identifying and driving implementation of appropriate controls, processes, and remediation of non-compliance
• Research and advocate new technologies, architectures, and security products that will support security maturity roadmap
• Act as a subject matter expert for advisory, review and approval of security designs, configurations, baselines, and technical standards
• Create and review threat models using various approaches such as off the shelf tools, whiteboarding etc.
• Good to have hands on Microsoft Threat Model and SD Element or any other open source threat modelling tools
• Interfaces frequently with information security industry groups to stay abreast of emerging security trends
• Helps establish overall enterprise information security architecture (EISA) by aligning business processes, IT software and hardware, local and wide area networks, people, operations, and projects with the organization's overall security strategy
• Evaluates proposals to determine if proposed security solutions effectively address enterprise requirements, as detailed in solicitation documents
• Interprets and/or approves security requirements relative to the capabilities of new information technologies.
• Good understanding of AI and emerging technologies. Which includes GAI, Deep Learning, Guardrails, etc..

Work Experience / Knowledge :

• 10+ years' IT experience with 6+ years focused on security and solution architecture
• 3+ years' experience with cloud delivery platforms IaaS/PaaS/SaaS and providers such as Amazon Web Services (AWS) and Microsoft
• Experience leading enterprise-wide security initiatives, including architecture and implementation of various security solutions & processes
• Ability to engage with senior leaders to define requirements and communicate effectively the results and risks
• Expert in 1 or more technology domains - infrastructure, application, network, IAM, data, endpoint
• Experience working with enterprise architecture practice and methodology, with security focus.
• Experience authoring security standards, reference architectures, patterns, and guidelines
• Knowledge of or experience with industry security controls frameworks such as NIST, CSA CCM, CIS Critical Security Controls.
• Hands‑on experience in Cloud (Microsoft Azure/GCP/AWS ) security architecture, security engineering, or equivalent experience with vendor specific cloud certification.

Qualifications :

• BE/Btech degree and relevant work experience is required
• 8-10 years of experience in software development, information security and architecture design & controls
• Certified Information Systems Security Professional (CISSP) or equivalent
• Preferred - certified in an enterprise architecture methodology and framework like TOGAF or SABSA
• Cloud Security Professional (CCSP), Certified Cloud Security Knowledge (CCSK), or preferred vendor certifications from AWS, Microsoft Azure or Google Cloud Platform
• In-depth knowledge and understanding of OWASP Top 10 and CWE Top 25 with experience in assessment and providing remediation strategies

Working with Us

As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization