Senior Cybersecurity Architect

Aarushi Infotech; Bengaluru; On-site; INR 4,000,000 - 7,500,000; Full time

Job summary

Aarushi Infotech in Bengaluru seeks a highly experienced Cybersecurity Architect to design and govern the organization’s security architecture, roadmap, and governance.

You will lead risk assessments, threat modeling, and ensure compliance with NIST, ISO 27001, CSA, and related standards while guiding architecture across IAM, network and cloud security, data protection, and AI security.

Collaborate with executives and delivery teams to translate architecture roadmaps into secure programs.

Qualifications

• Master's degree in Cybersecurity, Information Security, Computer Science, or related field.
• Bachelor's degree in Cybersecurity, IT, or related discipline.

Responsibilities

• Define and govern enterprise cybersecurity architecture frameworks and standards.
• Develop risk-driven security solution architectures and transition roadmaps.
• Review and endorse cybersecurity architecture blueprints for compliance.
• Maintain architecture repository with artifacts, threat models, and roadmaps.
• Translate roadmaps into executable programs and security controls.
• Lead threat modeling, risk assessments, and review vendor proposals from a cybersecurity perspective.
• Define standards for cloud security, Zero Trust, DevSecOps, and secure supply chain.

Skills

Zero Trust

IAM

Network Security

Cloud Security

Application Security

Data Protection

Threat Modeling

Risk Assessment

AI/GenAI Security

Governance

Education

Master's degree in Cybersecurity / related

Bachelor's degree in Cybersecurity / IT

Job description

The role holder is responsible for developing and maintaining the overall cybersecurity architecture and roadmap, while providing technical leadership and advisory support across the organization. The position focuses on evaluating current cybersecurity architectures, identifying gaps, defining the target state, and developing the transition roadmap. The role holder is also responsible for establishing cybersecurity architecture principles and ensuring all activities comply with the organization’s policies and procedures.

KEY RESPONSIBILITIES

• Define and govern the enterprise cybersecurity architecture frameworks, standards, reference architectures, and security control patterns to protect enterprise IT, cloud, and digital platforms, ensuring alignment with enterprise security principles and regulatory requirements.
• Define and govern cybersecurity architecture standards, processes, and best practices across identity & access management (IAM), network security, application security, cloud security, data protection, and endpoint security to enable a secure-by-design enterprise ecosystem.
• Develop risk-driven and optimization-focused security solution architectures, providing domain-specific high-level architectural guidance to mitigate cyber risks, address security gaps, improve resilience, and optimize security investments.
• Authorized to review, endorse, and co-sign cybersecurity architecture blueprints for all systems, platforms, and solutions to ensure compliance with enterprise cybersecurity architecture and security governance.
• Maintain and update the Architecture Repository with cybersecurity architecture artifacts, threat models, security patterns, and the cybersecurity architecture roadmap.
• Define and maintain cybersecurity architecture principles, frameworks, guidelines, and roadmaps in alignment with group-level Architecture Governance & Enablement functions, providing architectural oversight across all group subsidiaries.
• Manage end-to-end cybersecurity architectural engagements, including security blueprinting, threat modeling, and risk assessments, identifying gaps between As-Is and To-Be security architectures and defining transition roadmaps.
• Evaluate and assess current-state security architectures and define target-state cybersecurity architectures for specific business, technology, and regulatory domains.
• Support Technology Excellence & Control functions by translating cybersecurity architecture roadmaps into executable programs, initiatives, and security controls.
• Evaluate and review technical and architectural proposals (RFIs, RFPs, vendor solutions) from a cybersecurity perspective, providing expert recommendations and risk-based insights.
• Develop, maintain, and govern cybersecurity reference architectures, policies, standards, and design guidelines for enterprise and line-of-business domains, supported by continuous threat intelligence, market analysis, and emerging technology trends.
• Identify and conduct cybersecurity efficiency and optimization studies, translating findings into roadmap initiatives with measurable risk reduction and cost optimization outcomes.
• Support architecture-related change management and governance forums, including ARB decisions, security exception reviews, RFP evaluations, and architecturally significant change requests.
• Provide cybersecurity architectural oversight for demand management reviews, ensuring new initiatives, platforms, and business capabilities align with enterprise security strategy and risk appetite.
• Define architectural standards and enablement frameworks for cloud security, Zero Trust, DevSecOps, and secure software supply chain practices, ensuring scalable and compliant adoption across the organization.
• Define and govern cybersecurity architecture requirements for AI, ML, and GenAI platforms, including model security, data protection, identity controls, secure pipelines, and protection against emerging AI-related threats.
• Define and govern enterprise cyber resilience and security-by-design requirements, including disaster recovery, business continuity, threat detection, incident response integration, and regulatory compliance readiness.

MINIMUM QUALIFICATIONS, EXPERIENCE, SKILLS & COMPETENCIES

• Master’s degree in Cybersecurity, Information Security, Computer Science, Telecommunications, Engineering, or a related discipline (preferred).
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Telecommunications, or a related discipline.

Professional Certifications Preferred

Preferred Enterprise and security architecture certifications such as:

• TOGAF
• SABSA
• CISSP
• CISM
• CCSP
• GIAC (relevant domains)
• Cloud security certifications (AWS, Azure, GCP)

Years of Experience

• A minimum of 12 years of relevant cybersecurity experience, including at least 5 years in a senior or principal cybersecurity architecture role.

Nature of Experience

• Proven experience leading large-scale cybersecurity architecture transformation and implementation programs.
• Prior experience in leading or influencing large-scale technology or security organizations.
• Strong exposure to emerging cyber threats, security technologies, and regulatory requirements.

Job Specific Knowledge and Skills

• Strong leadership and stakeholder management skills, with the ability to influence C-level executives and senior leadership.
• Strong knowledge of the telecommunications industry, large-scale enterprise environments, and global security regulatory landscapes.
• Deep expertise in enterprise cybersecurity architecture, including:
  • Zero Trust Architecture
  • Identity & Access Management (IAM)
  • Network & Cloud Security
  • Application & API Security
  • Data Protection & Encryption
  • SOC, SIEM, SOAR, and threat detection architectures
• Strong change management, decision-making, and problem-solving capabilities.
• Strong understanding of enterprise technology stacks, integration patterns, and hybrid/multi-cloud environments.
• Strong knowledge of cybersecurity frameworks and standards (NIST, ISO 27001, CSA, MITRE ATT&CK).
• Experience with cloud-native security platforms and modern security architectures.
• Strong understanding of AI/ML and GenAI security risks, controls, and governance requirements.
• Ability to balance risk management, compliance, and business enablement.

Business Language Skills

• English Language proficiency level is fluent

Skills: zero trust architecture,cyber resilience / disaster recovery,nist / iso 27001 / mitre att&ck,application & api security,ai / ml / genai security,data protection & encryption,network security,soc / siem / soar architecture,threat modeling & risk assessment,devsecops & secure software supply chain,enterprise cybersecurity architecture,security architecture roadmap & transformation,iam / identity & access management,cloud security / hybrid multi-cloud,cybersecurity governance & architecture standards