Role : Cybersecurity Technical Architect

Experience : 12 - 16 Years

Location : Bangalore

Function : IT Operations & Support - IT Security

Role Overview :

The Cybersecurity Technical Architect will serve as the enterprise design authority for cybersecurity, responsible for defining, governing, and evolving the organization's security architecture across identities, applications, infrastructure, data, AI systems, and third-party ecosystems.

The role requires deep technical expertise and strategic leadership to ensure security capabilities are scalable, resilient, compliant, and aligned with business priorities and emerging threats.

Key Responsibilities :

Enterprise Security Architecture :

- Define and evolve enterprise cybersecurity architecture aligned with NIST CSF, ISO 27001, Zero Trust Architecture (ZTA), and Secure-by-Design principles.

- Develop reusable security architecture patterns and reference designs aligned with business and regulatory requirements.

- Act as the Security Design Authority for enterprise initiatives, cloud transformations, and digital platform programs.

Identity & Access Management (IAM) :

- Architect and govern enterprise IAM capabilities, including Identity Lifecycle Management, PAM, SSO, MFA, and adaptive access controls.

- Drive enterprise-wide adoption of Zero Trust principles across users, devices, workloads, and APIs.

DevSecOps & Application Security :

- Define and govern Secure Software Development Lifecycle (SSDLC) practices.

- Establish security standards for CI/CD pipelines, Infrastructure as Code (IaC), APIs, microservices, and cloud-native applications.

- Oversee implementation of security tooling, including SAST, DAST, SCA, secrets scanning, and container/Kubernetes security.

Asset & Data Security :

- Define and govern IT and information asset management strategies.

- Ensure discovery, classification, and ownership of applications, infrastructure, data assets, and AI/ML models.

- Integrate asset inventory with risk management, vulnerability management, and incident response processes.

Endpoint Security & Security Assurance :

- Architect endpoint and workload protection strategies across devices, servers, and cloud environments.

- Govern enterprise standards for EDR/XDR, device compliance, encryption, and OS hardening.

- Lead security testing and assurance activities, including vulnerability assessments, penetration testing, and red team exercises.

AI Security & Third-Party Risk Management :

- Define governance and security controls for AI and GenAI adoption, including model security, data privacy, and abuse prevention.

- Assess and mitigate AI-driven threats such as data leakage, model poisoning, and adversarial attacks.

- Establish cybersecurity requirements and oversight for third-party and supplier risk management.

Security Monitoring & Awareness :

- Provide architectural oversight for security monitoring and incident response capabilities.

- Promote Secure-by-Design practices through security awareness programs, phishing simulations, and role-based security training.

Required Skills :

- Enterprise Security Architecture (On-Premises, Cloud, and Hybrid Environments)

- Identity & Access Management (IAM) and Zero Trust Architecture

- DevSecOps and Application Security

- SIEM, SOAR, EDR/XDR, and Vulnerability Management

- API, Data, and Cloud Security

- AI/ML Security Principles and Governance

Qualifications & Certifications :

- Bachelor's degree in Computer Science or an equivalent qualification.

- Relevant certifications such as CISSP, CISM, SABSA, CCSP, TOGAF, and Cloud Security Certifications (AWS, Azure, or GCP) are preferred.

Preferred Experience :

- Experience working in regulated industries and global security programs.

- Proven track record of leading enterprise-scale, cross-functional cybersecurity initiatives.

- Strong stakeholder management, architectural documentation, communication, and decision-making capabilities.