Enterprise Security Architect

Urgent requirement for Enterprise Security Architect for Bangalore Location.

Experience : 11-16 Yrs

Job Location : Bangalore

Job Description :

The Enterprise Security Architecture function is responsible for understanding the firms strategic goals, key business processes, critical assets and risk appetite to develop, maintain and communicate security strategy roadmaps, security reference architectures, security capability models and provide governance in the security design authority.

Role :

The Enterprise Security Architect role will :

- Report into the Lead Enterprise Security Architect within the Firm UK Cyber Security function.

- Lead in developing functional level security strategies for 1st line Cyber Security domain areas (i.e., infrastructure security, application security, data security, security monitoring etc).

- Understand the latest security trends, threats, security product and capability horizon to be able to develop fit for purpose functional level security strategies.

- Have a strong grasp for understanding business & technology strategies, priorities, risk appetite and budget constraints to be able to develop functional level security strategies which align to the firms business and technology context.

- Support the maintenance of Firm UKs enterprise level security capability model and security product catalogue in the Enterprise Architecture tool called Alfabet.

- Co-chair the Security Design Authority which provides governance and sign off for security specific initiatives going through our central Technology Assurance process and review and sign off for security architecture artefacts (i.e., security reference architectures, patterns and specifications).

- Develop and maintain our catalogue of Security Reference Architectures. Which provide high-level security guidance on a specific technology domain providing best practices, common threats and controls.

- Support with producing and maturity Enterprise Security Architecture level reporting and metrics for technology, business and security stakeholders.

- Assist in enterprise level projects when required to ensure projects are aligned to security direction.

Prior experience

You must :

- Have experience developing, communicating and embedding security strategies within an organisation. Strategies can be developed at various levels within an organisation (i.e., business unit level, functional level or operational level).

- Experience at any of these levels will be considered.

- Have experience in transferable skills that can be applied to Enterprise Security Architecture which are horizon scanning & research, aligning security with business & technology goals, developing security architecture guidance & designs, providing security architecture services, sitting on / or chairing governance committees, data driven reporting to C-suite level and heads of business units.

Have worked as at least one of :

1. Enterprise Security Architect

2. Infrastructure/Solution Architect

3. Security Architect/Consultant

- Hands on experience and knowledge in securing digital products/solutions in the Cloud (e.g. AWS, Azure, and Google).

- Good understanding of Cloud, Application and SaaS security concepts, best practices, and industry standards.

- Be able to demonstrate the ability to adapt communication style to explain technical concepts to different people within an organisation whether advising stakeholders, directing teams, or sharing experience.

- Experience of successfully working in a fast paced, customer service/regulated environments, delivering high quality information security services.

- Be calm in challenging situations, able to navigate through complex security problems to find the root cause and a balanced outcome.

It would be advantageous if you have some, or all of the following certifications :

- SABSA (Sherwood Applied Business Security Architecture)

- CISSP (Certified Information Systems Security Professional)

- CISM (Certified Information Security Manager)

- Cloud Security Certifications (i.e., Azure, Microsoft, GCP)