Security Solution Architect

Ness Digital Engineering; Bengaluru; On-site; INR 2,200,000 - 4,200,000; Full time

Job summary

Ness Digital Engineering is seeking a Security Solution Architect to lead data security assessment and remediation from a security, privacy, governance, and risk management perspective. The role defines requirements and target-state architecture to protect sensitive customer and loyalty data.

The position drives strategic leadership across data protection, privacy, encryption, governance, and security architecture, collaborating with data architects, analysts, stakeholders, and technology owners

Qualifications

• 10+ years in Enterprise Security Architecture or Data Security.
• Experience leading large-scale data protection programs.
• Experience assessing customer and loyalty ecosystems.
• Proven ability to engage business and executive stakeholders.

Responsibilities

• Lead data security and privacy assessments across source and destination systems.
• Assess PII, payment card, loyalty, and sensitive customer data exposure risks.
• Conduct encryption and protection assessments for data at rest and in transit.
• Evaluate data masking, tokenization, and data minimization opportunities.
• Review access governance, RBAC, privileged access, and ownership models.
• Identify security, privacy, and governance gaps.
• Define target-state security architecture and control framework.
• Develop remediation recommendations and implementation priorities.
• Facilitate security and governance workshops with stakeholders.
• Support risk assessments and executive reporting.

Skills

Enterprise Security Architecture

Data Security & Privacy

Data Protection Controls

Encryption & Key Management

Access Management & RBAC

Data Governance Frameworks

Risk Assessment Methodologies

Security Architecture Review

Cloud & Hybrid Security Controls

Data Masking & Tokenization

Job description

Description

Security Solution Architect

Role Purpose

The Security Solution Architect will lead the Data Security Assessment and Remediation initiative from a security, privacy, governance, and risk management perspective. The role is responsible for assessing the current-state security posture, identifying control gaps, defining security and privacy requirements, and establishing a secure target-state architecture that protects sensitive customer and loyalty data.

Job Summary

The Security Solution Architect will provide strategic leadership across data protection, privacy, encryption, governance, and security architecture workstreams. This role will assess how sensitive data is collected, transmitted, stored, accessed, and consumed across the enterprise landscape and define practical recommendations to reduce data exposure risks while improving compliance, governance, and operational controls.

The role will collaborate closely with Data Architects, Data Analysts, business stakeholders, security teams, and technology owners to establish a secure-by-design framework for future-state solutions.

Key Responsibilities

• Lead data security and privacy assessments across source and destination systems.
• Assess PII, payment card, loyalty, and sensitive customer data exposure risks.
• Conduct encryption and protection assessments for data at rest and in transit.
• Evaluate data masking, tokenization, and data minimization opportunities.
• Review access governance, RBAC, privileged access, and ownership models.
• Identify security, privacy, and governance gaps.
• Define target-state security architecture and control framework.
• Develop remediation recommendations and implementation priorities.
• Facilitate security and governance workshops with stakeholders.
• Support risk assessments and executive reporting.

Required Technical Skills

• Enterprise Security Architecture
• Data Security & Privacy
• Data Protection Controls
• Encryption & Key Management
• Access Management & RBAC
• Data Governance Frameworks
• Risk Assessment Methodologies
• Security Architecture Review
• Cloud & Hybrid Security Controls
• Data Masking & Tokenization

Preferred Skills

• PIPEDA
• GDPR
• PCI-DSS
• Privacy by Design
• Zero Trust Security Principles
• Data Loss Prevention (DLP)
• Information Security Governance
• Security Control Frameworks (NIST, ISO 27001)

Experience Required

• 10+ years in Enterprise Security Architecture or Data Security.
• Experience leading large-scale data protection programs.
• Experience assessing customer and loyalty ecosystems.
• Proven ability to engage business and executive stakeholders.