Security Architect

Skillventory; Mumbai; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Skillventory seeks a seasoned Security Architect to design and implement robust security architectures across cloud, on-premises, and hybrid environments in Mumbai.

You will lead risk assessments, ensure regulatory compliance (ISO 27001, NIST, PCI-DSS), mentor teams, and collaborate with vendors to embed secure design, conduct reviews, and drive monitoring and incident response with SIEM, EDR, WAF, and IAM.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field.
• 10+ years in cybersecurity, with 5+ years in security architecture or engineering.
• Preferred certifications: CISSP, CISM, CISA, AWS/Azure/GCP Security Specialty, or equivalent.

Responsibilities

• Design and implement robust security architecture for cloud, on-premises, and hybrid environments.
• Conduct internal architecture reviews to validate design adequacy, security controls, and alignment with Bank standards before implementation, followed by annual or half-yearly reviews based on criticality.
• Develop and enforce security policies, standards, and procedures across systems and applications.
• Define security requirements, understand data flows, and partner with teams to enable secure design and integration.
• Conduct risk assessments and recommend mitigation strategies.
• Ensure compliance with relevant regulatory frameworks, including ISO 27001, NIST, and PCI-DSS.
• Support audits and regulatory responses across DPSC, RBI Cybersecurity Framework, SEBI CSCRF, IT outsourcing, and digital lending requirements.
• Ensure ATM logical controls are aligned with Bank standards.
• Conduct periodic ATM security assessments covering vulnerabilities, host security, and control effectiveness.
• Perform governance reviews of ATM logical security controls.
• Act as a security advisor to business, IT, vendors, partners, and application teams.
• Lead threat modeling and security reviews for new systems, projects, and services.
• Ensure timely and accurate submission of regulatory returns and reports, including Quarterly Cyber KRI and Tranche I, II, and III submissions.
• Maintain records of regulatory submissions, approvals, and RBI correspondence.
• Conduct training and awareness on RBI regulations and compliance practices.
• Promote regulatory compliance and ethical conduct across the organization.
• Partner with Security Operations to enhance monitoring and incident response capabilities.
• Support security breach investigations and root cause analysis.
• Manage security solutions such as SIEM, EDR, WAF, and IAM.
• Track emerging cybersecurity trends, technologies, and threat landscapes.

Skills

Security Architecture

Threat Modeling

Security Reviews

Stakeholder Communication

Regulatory Awareness

Education

Bachelor's degree in Computer Science or Cybersecurity

Masters preferred

Tools

SIEM

EDR

WAF

IAM

Job description

Role & responsibilities

Security Architecture Design:

• Design and implement robust security architecture for cloud, on-premises, and hybrid environments.
• Conduct internal architecture reviews to validate design adequacy, security controls, and alignment with Bank standards before implementation, followed by annual or half-yearly reviews based on criticality.
• Develop and enforce security policies, standards, and procedures across systems and applications.
• Define security requirements, understand data flows, and partner with teams to enable secure design and integration.

Risk Management & Compliance:

• Conduct risk assessments and recommend mitigation strategies.
• Ensure compliance with relevant regulatory frameworks, including ISO 27001, NIST, and PCI-DSS.
• Support audits and regulatory responses across DPSC, RBI Cybersecurity Framework, SEBI CSCRF, IT outsourcing, and digital lending requirements.

ATM Logical Security:

• Ensure ATM logical controls are aligned with Bank standards.
• Conduct periodic ATM security assessments covering vulnerabilities, host security, and control effectiveness.
• Perform governance reviews of ATM logical security controls.

Collaboration & Guidance:

• Act as a security advisor to business, IT, vendors, partners, and application teams.
• Lead threat modeling and security reviews for new systems, projects, and services.

Regulatory Reporting:

• Ensure timely and accurate submission of regulatory returns and reports, including Quarterly Cyber KRI and Tranche I, II, and III submissions.
• Maintain records of regulatory submissions, approvals, and RBI correspondence.

Training & Awareness:

• Conduct training and awareness on RBI regulations and compliance practices.
• Promote regulatory compliance and ethical conduct across the organization.

Monitoring & Response:

• Partner with Security Operations to enhance monitoring and incident response capabilities.
• Support security breach investigations and root cause analysis.

Security Tools & Technologies:

• Manage security solutions such as SIEM, EDR, WAF, and IAM.
• Track emerging cybersecurity trends, technologies, and threat landscapes.

Preferred candidate profile

• Bachelors degree in Computer Science, Cybersecurity, Information Technology, or a related field; Masters preferred.
• 10+ years of cyber security experience, including 5+ years in security architecture or engineering.
• Preferred certifications: CISSP, CISM, CISA, AWS/Azure/GCP Security Specialty, or equivalent.