Job Requirements
About the Role
The Security Architect will assist the Security Provision Role in reviewing new systems and changes to existing systems through technical security risk assessments. The role involves analyzing the threat landscape and providing recommendations to mitigate security risks to acceptable levels as defined by the team.
Key Responsibilities
Primary Responsibilities
- Review application and IT architecture and integrations for any cybersecurity or information security vulnerabilities.
- Engage and guide business units to define secure business processes aligned with business and enterprise security architecture.
- Aid in the establishment and management of enterprise security architecture standards and best practices, aligning with defined policies and standards for all applicable platforms and environments in the Bank.
- Provide design advice based on information security best practices for teams involved in application development or integration, if instructed by the reporting manager.
- Define security standards and help standardize reviews to reduce turnaround times and support agile processes.
Secondary Responsibilities
- Create and maintain domain-specific strategies aligned with business drivers and higher-level strategies.
- Leverage cross-domain and cross-channel security experience and knowledge to provide macro-level information security risk inputs.
- Help maintain documentation and provide support as part of the governance function.
What We Are Looking For
Education
- Educational qualification in BE/B.Tech
- Post Graduation degree in ME/M.Tech
Experience
- 8 years of proven experience in managing security architecture reviews independently.
Skills and Attributes
- Strong understanding of cybersecurity and information security principles.
- Knowledge of enterprise security architecture standards and best practices.
- Ability to analyze threat landscapes and recommend appropriate security measures.
- Effective communication and documentation skills.
- Experience with secure application development and integration practices.