Cyber Security Architect

Overview:
**_
Role Purpose_**
- The purpose of this role is to design the organisation’scomputer and network security infrastructure and protect its systems andsensitive information from cyber threats._

**_
Do_**
- **_
Design and develop enterprise cyber security strategyand architecture_**
- _ Understand security requirements by evaluating businessstrategies and conducting system security vulnerability and riskanalyses _
- _Identify risks associated with business processes, operations,_
- information security programs and technology projects_
- _ Identify and communicate current and emerging security threatsand design security architecture elements to mitigate threats as theyemerge_
- _ Identify security design gaps in existing and proposedarchitectures and recommend changes or enhancements_
- _ Provide product best fit analysis to ensure end to end securitycovering different faucets of architecture e.g. Layered security,Zoning, Integration aspects, API, Endpoint security, Data security,Compliance and regulations_
- _ Demonstrate experience in doing security assessment against NISTFrameworks, SANS, CIS, etc._
- _ Provide support during technical deployment, configuration,integration and administration of security technologies_
- _ Demonstrate experience around ITIL or Key process-orienteddomains like incident management, configuration management, changemanagement, problem management etc._
- _ Provide assistance for disaster recovery in the event of anysecurity breaches, attacks, intrusions and unusual, unauthorized orillegal activity_
- _ Provide solution of RFP’s received from clients and ensureoverall design assurance_
- Analyse technology environment, enterprise specifics, clientrequirements to set a collaboration design framework/ architecture
- Depending on the client’s need with particular standards andtechnology stacks create complete RFPs
- Provide technical leadership to the design, development andimplementation of custom solutions through thoughtful use of moderntechnology
- Define and understand current state solutions and identifyimprovements, options & tradeoffs to define target state solutions
- Clearly articulate and sell architectural targets, recommendationsand reusable patterns and accordingly propose investment roadmaps
- Evaluate and recommend solutions to integrate with overalltechnology ecosystem
- **_
Stakeholder coordination & audit assistance_**
- _ Liaise with stakeholders in relation to cyber security issuesand provide timely support and future recommendations_
- _ Provide assistance in maintaining an information security riskregister and help with internal and external audits relating toinformation security_
- _ Support audit of security best practices and implementation ofsecurity principles across the organization, to meet business goalsalong with customer and regulatory requirements_
- _ Assist with the creation, maintenance and delivery of cybersecurity awareness training to team members and customers_

**_
Stakeholder Interaction_**

**_
Stakeholder Type_**

**_
Stakeholder Identification_**

**_
Purpose of Interaction_**

**_
Internal_**
- Program Manager/Director_
- Regular reporting & updates_
- Infrastructure (CIS team)_
- For infrastructure support_

**_
External_**
- Customer_
- To coordinate for all security breaches & resolutions_

**_
Display_**
- Lists the competencies required to perform this role effectively:_
- **_ Functional Competencies/ Skill_**
- Leveraging Technology - Knowledge of current and upcoming securitytechnologies (e.g. Firewalls, IPS, DDoS, SIEM, WAF, Endpoint etc.) andunderstanding of compliance regulatory requirement like PCI DSS, HIPAA,etc. **_Expert_**:

- Systems Thinking - Understanding of the Wipro system(interrelatedness, interdependencies and boundaries) and perform problemsolving in a complex environment - **_Expert_**:

- Leveraging Technology - In-depth knowledge of and mastery overecosystem technology that commands expert authority respect -**_Master_**:

- Technical Knowledge - Certified Information Systems SecurityProfessional (CISSP), Cloud Architect Certification from AWS and Azure,ToGAF or SABSA certification-**_Master_**
- Competency Levels_
- Foundation_
- Knowledgeable about the competency requirements. Demonstrates (inparts) frequently with mínimal support and guidance._
- Competent_
- Consistently demonstrates the full range of the competencywithout guidance. Extends the competency to difficult and unknownsituations as well._
- Expert_
- Applies the competency in all situations and is serves as a guideto others as well._
- Master_
- Coaches others and builds organizational capability in thecompetency area. Serves as a key resource for that competency and isrecognized within the entire organization._
- **_
Behavioral Competencies_**
- _ Effective Communication_
- _ Managing Complexity_
- _ Client centricity_
- _ Technology Acumen_
- _ Innovation_
- _ Problem Solving approach_
- _ Collaborative Working_
- _ Execution