Security Architect

Societe Generale Global Solution Centre; Bengaluru; On-site; INR 3,000,000 - 4,200,000; Full time

Job summary

Societe Generale Global Solution Centre in Bengaluru seeks an experienced Security Architect to define and promote security architecture standards and to review architectures for compliance with group security requirements. You will guide applications, APIs, cloud platforms, and data platforms with Secure-by-Design principles.

The role requires 8–10 years in security roles with 4–5 years in architecture/design, strong governance knowledge, and cloud security experience.

Qualifications

• 8–10 years of professional experience with minimum 4–5 years in security architecture or security design roles.
• Strong understanding of secure architecture principles, security frameworks, and security governance.
• Experience in Cloud Security (Azure, AWS, or Hybrid).
• Good understanding of Identity & Access Management (IAM), Authentication, Authorization, SSO, MFA, and Privileged Access Management.
• Experience in API Security, Web Security, Network Security, and Application Security practices.
• Knowledge of regulatory and compliance requirements applicable to financial services.
• Security certifications such as CISSP, CISM, CCSP, SABSA, Azure Security Engineer, or equivalent are highly appreciated.

Responsibilities

• Define and promote Security Architecture standards, principles, patterns, and best practices across the organization.
• Review solution architectures to ensure compliance with Group security standards and Secure-by-Design requirements.
• Provide security guidance for applications, APIs, cloud platforms, infrastructure services, and data platforms.
• Collaborate with Solution Architects, Technical Architects, Engineering teams, and Security teams to design secure enterprise solutions.
• Conduct security assessments and identify security risks, gaps, and remediation actions.
• Support architecture reviews, Design Authority sessions, and project governance activities.
• Define security controls related to authentication, authorization, data protection, encryption, secrets management, and API security.
• Provide architectural guidance for cloud migration, platform modernization, and digital transformation initiatives.
• Support implementation of security controls aligned with regulatory, compliance, and banking requirements.
• Evaluate new technologies and security solutions and recommend adoption where appropriate.
• Contribute to architecture blueprints, security standards, reusable patterns, and reference architectures.
• Stay updated with the latest security threats, cyber trends, cloud security practices, and industry best practices.
• Analyze existing security processes and governance models and identify improvement opportunities.
• Conduct proof-of-concepts (POCs) and architecture studies to validate proposed security solutions.
• Mentor project teams and promote security awareness across the engineering community.
• Demonstrate strong analytical and problem-solving skills to address complex security and architecture challenges.

Skills

Security Architecture

Cyber Security

Application Security

Cloud Security

IAM/SSO/MFA

API Security

Security Governance

DevSecOps

Regulatory Compliance

Security Certifications

Tools

SIEM

Job description

Reference 26000G8I

Responsibilities

• Define and promote Security Architecture standards, principles, patterns, and best practices across the organization.
• Review solution architectures to ensure compliance with Group security standards and Secure-by-Design requirements.
• Provide security guidance for applications, APIs, cloud platforms, infrastructure services, and data platforms.
• Collaborate with Solution Architects, Technical Architects, Engineering teams, and Security teams to design secure enterprise solutions.
• Conduct security assessments and identify security risks, gaps, and remediation actions.
• Support architecture reviews, Design Authority sessions, and project governance activities.
• Define security controls related to authentication, authorization, data protection, encryption, secrets management, and API security.
• Provide architectural guidance for cloud migration, platform modernization, and digital transformation initiatives.
• Support implementation of security controls aligned with regulatory, compliance, and banking requirements.
• Evaluate new technologies and security solutions and recommend adoption where appropriate.
• Contribute to architecture blueprints, security standards, reusable patterns, and reference architectures.
• Stay updated with the latest security threats, cyber trends, cloud security practices, and industry best practices.
• Analyze existing security processes and governance models and identify improvement opportunities.
• Conduct proof-of-concepts (POCs) and architecture studies to validate proposed security solutions.
• Mentor project teams and promote security awareness across the engineering community.
• Demonstrate strong analytical and problem-solving skills to address complex security and architecture challenges.

Roles & Responsibilities

• Define and promote Security Architecture standards, principles, patterns, and best practices across the organization.
• Review solution architectures to ensure compliance with Group security standards and Secure-by-Design requirements.
• Provide security guidance for applications, APIs, cloud platforms, infrastructure services, and data platforms.
• Collaborate with Solution Architects, Technical Architects, Engineering teams, and Security teams to design secure enterprise solutions.
• Conduct security assessments and identify security risks, gaps, and remediation actions.
• Support architecture reviews, Design Authority sessions, and project governance activities.
• Define security controls related to authentication, authorization, data protection, encryption, secrets management, and API security.
• Provide architectural guidance for cloud migration, platform modernization, and digital transformation initiatives.
• Support implementation of security controls aligned with regulatory, compliance, and banking requirements.
• Evaluate new technologies and security solutions and recommend adoption where appropriate.
• Contribute to architecture blueprints, security standards, reusable patterns, and reference architectures.
• Stay updated with the latest security threats, cyber trends, cloud security practices, and industry best practices.
• Analyze existing security processes and governance models and identify improvement opportunities.
• Conduct proof-of-concepts (POCs) and architecture studies to validate proposed security solutions.
• Mentor project teams and promote security awareness across the engineering community.
• Demonstrate strong analytical and problem-solving skills to address complex security and architecture challenges.

Required Skills & Experience

• Hands-on experience in Security Architecture, Cyber Security, Application Security, or Cloud Security.
• Overall professional experience of 8–10 years with minimum 4–5 years in security architecture or security design roles.
• Strong understanding of secure architecture principles, security frameworks, and security governance.
• Experience in Cloud Security (Azure, AWS, or Hybrid Cloud environments).
• Good understanding of Identity & Access Management (IAM), Authentication, Authorization, SSO, MFA, and Privileged Access Management.
• Experience in API Security, Web Security, Network Security, and Application Security practices.
• Knowledge of SIEM, Security Monitoring, Vulnerability Management, and Security Operations concepts.
• Experience with Secure-by-Design methodologies and security risk assessments.
• Understanding of DevSecOps, CI/CD security controls, and security automation.
• Knowledge of regulatory and compliance requirements applicable to financial services.
• Security certifications such as CISSP, CISM, CCSP, SABSA, Azure Security Engineer, or equivalent are highly appreciated.
• Finance and banking experience will be highly appreciated.

Why join us

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA. If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.

Business insight

At Société Générale, we are convinced that people are drivers of change, and that the world of tomorrow will be shaped by all their initiatives, from the smallest to the most ambitious. Whether you’re joining us for a period of months, years or your entire career, together we can have a positive impact on the future. Creating, daring, innovating, and taking action are part of our DNA. If you too want to be directly involved, grow in a stimulating and caring environment, feel useful on a daily basis and develop or strengthen your expertise, you will feel right at home with us!

Still hesitating?

You should know that our employees can dedicate several days per year to solidarity actions during their working hours, including sponsoring people struggling with their orientation or professional integration, participating in the financial education of young apprentices, and sharing their skills with charities. There are many ways to get involved.

We are committed to support accelerating our Group’s ESG strategy by implementing ESG principles in all our activities and policies. They are translated in our business activity (ESG assessment, reporting, project management or IT activities), our work environment and in our responsible practices for environment protection.