Solution Architect

Jobtailor; Bengaluru; On-site; INR 4,500,000 - 6,500,000; Full time

Job summary

Jobtailor seeks an experienced Information Security Leader to design and oversee an enterprise-wide risk management program. You will drive cybersecurity assessments across IT/OT, including automotive and digital product platforms.

The role requires strong expertise in risk management, regulatory compliance (ISO 27001, NIST, GDPR, CRA), and technical controls such as secure design and encryption. Collaboration with global teams is essential.

Qualifications

• 8+ years of experience in information security, risk management, or cybersecurity governance.
• Bachelor’s degree in Information Security, Cyber Security, Computer Science, Information Science, or related field.
• Advanced degrees or certifications (CISSP/CRISC/CISM/CEH) are a plus.
• Deep understanding of cybersecurity frameworks: ISO 27001, NIST CSF, COBIT, COSO, and CRA.
• Strong expertise in risk management, cybersecurity assessments, penetration testing, and vulnerability management.
• Ability to define and implement technical controls such as secure coding practices, network segmentation, and endpoint protection.
• Experience with regulatory compliance and product security in automotive or manufacturing sector.
• Excellent analytical, communication, and leadership skills across global teams.

Responsibilities

• Develop and maintain an enterprise-wide information security risk management program.
• Conduct cybersecurity assessments across IT and OT environments, including connected vehicle platforms and digital products.
• Define and implement technical cybersecurity controls to mitigate identified risks (secure design, access controls, encryption, monitoring).
• Identify, assess and document risks related to digital components, software supply chains, and third-party integrations.
• Perform risk assessments, vulnerability analyses, and impact evaluations on IT systems and processes.
• Ensure compliance with ISO 27001, NIST, GDPR, and CRA; drive regulatory alignment.
• Collaborate with cross-functional teams to establish risk mitigation strategies and action plans.
• Monitor, track, and report risk metrics and KPIs.
• Drive security awareness programs and train employees on risk management practices.
• Prepare and present detailed risk assessment reports to senior management and regulatory bodies.

Skills

Information security

Risk management

Cybersecurity governance

Communication

Leadership

Stakeholder engagement

Education

Bachelor’s degree in Information Security

CISSP/CRISC/CISM/CEH certification

Tools

ISO 27001

NIST CSF

COBIT

COSO

CRA

Job description

Job Responsibilities

• Develop, implement, and maintain an enterprise-wide information security risk management program aligned with global standards and CRA requirements.
• Conduct detailed cybersecurity assessments across IT and OT environments, including connected vehicle platforms and digital products.
• Define and implement technical cybersecurity controls to mitigate identified risks, including secure design, access controls, encryption, and monitoring.
• Identify, assess, and document risks related to digital components, software supply chains, and third-party integrations.
• Perform risk assessments, vulnerability analyses, and impact evaluations on IT systems and processes.
• Ensure compliance with cybersecurity regulations and standards including ISO 27001, NIST, GDPR, and the Cyber Resilience Act.
• Collaborate with cross-functional teams to establish risk mitigation strategies and action plans.
• Monitor, track, and report on risk metrics and key performance indicators (KPIs).
• Drive security awareness programs and train employees on risk management practices.
• Prepare and present detailed risk assessment reports to senior management and regulatory bodies.

Qualifications

• 8+ years of experience in information security, risk management, or cybersecurity governance.
• Bachelor’s degree in Information Security, Cyber Security, Computer Science, Information Science, or a related field.
• Advanced degrees (e.g., Master’s) or certifications (e.g., CISSP, CRISC, CISM, CEH) are a plus.
• Deep understanding of cybersecurity frameworks: ISO 27001, NIST CSF, COBIT, COSO, and CRA.
• Strong expertise in risk management, cybersecurity assessments, penetration testing, and vulnerability management.
• Ability to define and implement technical controls such as secure coding practices, network segmentation, and endpoint protection.
• Experience with regulatory compliance and product security in the automotive or manufacturing sector.
• Excellent analytical skills for evaluating and prioritizing risks.
• Strong communication and stakeholder engagement skills across global teams.
• Strategic mindset with attention to detail and resilience under pressure.
• Effective team player with exceptional interpersonal and leadership capabilities.