Senior Associate, Security Architect, Regulatory Compliance, Technology and Operations

DBS; Mumbai; On-site; INR 2,800,000 - 4,800,000; Full time

Job summary

I-Think Techno in Mumbai (Kanjurmarg) seeks an experienced Senior Associate to strengthen the bank's security architecture and regulatory compliance program. The role focuses on cloud, on‑prem, and hybrid environments, risk assessments, and ATM logical security, working with vendors and internal teams.

Responsibilities include leading security reviews, ensuring ISO27001/NIST/PCI-DSS alignment, and guiding regulatory reporting and incident response.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field; Master’s preferred.
• 10+ years of cybersecurity experience, including 5+ years in security architecture or engineering.
• CISSP, CISM, CISA, AWS/Azure/GCP Security Specialty, or equivalent preferred.

Responsibilities

• Design and implement security architecture for cloud, on-premises, and hybrid environments.
• Lead security reviews and threat modeling for new systems and services.
• Ensure regulatory compliance (ISO 27001, NIST, PCI-DSS) and support RBI/CSCRF/audit requirements.
• Maintain ATM logical security controls and conduct periodic assessments.
• Guide vendors and internal teams on secure design and implementation.

Skills

Security architecture

Threat modeling

Regulatory compliance

Cloud security

Analytical skills

Stakeholder engagement

Security assessments

Education

Bachelor's degree in CS/IT/Cybersecurity

Master's degree preferred

Tools

AWS

Azure

GCP

SIEM

EDR

WAF

IAM

Docker

Kubernetes

Job description

## Senior Associate, Security Architect, Regulatory Compliance, Technology and OperationsApply: Infrastructure, Cloud & Information Security: I-Think Techno, Kanjurmarg: Full time: Posted Today: End Date: October 31, 2026 (23 days left to apply): WD89358**Business Function**Technology and Operations (T&O) enables and empowers the bank with an efficient, nimble and resilient infrastructure through a strategic focus on productivity, quality & control, technology, people capability and innovation. In Group T&O, we manage the majority of the Bank's operational processes and inspire to delight our business partners through our multiple banking delivery channels.**Job Summary:*** Experienced Security Architect role focused on strengthening the Bank’s and vendors’ security architecture, regulatory compliance, and ATM logical security.* Responsible for assessing and improving security posture across systems, data, applications, and networks in line with industry standards, regulations, and best practices.**Key Responsibilities:****Security Architecture Design:*** Design and implement robust security architecture for cloud, on-premises, and hybrid environments.* Conduct internal architecture reviews to validate design adequacy, security controls, and alignment with Bank standards before implementation, followed by annual or half-yearly reviews based on criticality.* Develop and enforce security policies, standards, and procedures across systems and applications.* Define security requirements, understand data flows, and partner with teams to enable secure design and integration.**Risk Management & Compliance:*** Conduct risk assessments and recommend mitigation strategies.* Ensure compliance with relevant regulatory frameworks, including ISO 27001, NIST, and PCI-DSS.* Support audits and regulatory responses across DPSC, RBI Cybersecurity Framework, SEBI CSCRF, IT outsourcing, and digital lending requirements.**ATM Logical Security:*** Ensure ATM logical controls are aligned with Bank standards.* Conduct periodic ATM security assessments covering vulnerabilities, host security, and control effectiveness.* Perform governance reviews of ATM logical security controls.**Collaboration & Guidance:*** Act as a security advisor to business, IT, vendors, partners, and application teams.* Lead threat modeling and security reviews for new systems, projects, and services.**Regulatory Reporting:*** Ensure timely and accurate submission of regulatory returns and reports, including Quarterly Cyber KRI and Tranche I, II, and III submissions.* Maintain records of regulatory submissions, approvals, and RBI correspondence.**Training & Awareness:*** Conduct training and awareness on RBI regulations and compliance practices.* Promote regulatory compliance and ethical conduct across the organization.**Monitoring & Response:*** Partner with Security Operations to enhance monitoring and incident response capabilities.* Support security breach investigations and root cause analysis.**Security Tools & Technologies:*** Manage security solutions such as SIEM, EDR, WAF, and IAM.* Track emerging cybersecurity trends, technologies, and threat landscapes.**Requirements:*** Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field; Master’s preferred.* 10+ years of cybersecurity experience, including 5+ years in security architecture or engineering.* Preferred certifications: CISSP, CISM, CISA, AWS/Azure/GCP Security Specialty, or equivalent.**Skills & Competencies:*** Strong understanding of security principles, architecture, and technologies.* Strong knowledge of cloud platforms, including AWS, Azure, and GCP, and cloud security frameworks.* Familiarity with microservices and container security, including Docker and Kubernetes.* Proven ability to conduct security assessments and interpret security reports.* Strong analytical, problem-solving, and communication skills, with the ability to engage internal and external stakeholders effectively.**Location:**I-Think Techno, Kanjurmarg**Job:**Technology**Schedule:**Regular**Employee Status:**Full time