Location: Mumbai (5 Days WFO)

Role Overview:

As a Security Assessment & Architect Manager, you will lead the design and validation of robust security frameworks for our diverse client portfolio. You will operate as a bridge between technical engineering teams and executive stakeholders, translating complex security requirements into actionable architectural roadmaps. Your day-to-day involves conducting deep-dive security assessments, overseeing vulnerability management lifecycles, and ensuring that security controls are seamlessly integrated into the development and operational workflows of our clients.

Key Responsibilities:

- Design and implement comprehensive security architectures that align with industry standards such as ISO 27001, NIST, and CIS benchmarks to protect critical client infrastructure.

- Lead end-to-end security assessment engagements, including penetration testing oversight and vulnerability analysis, to identify and mitigate systemic risks.

- Collaborate with cross-functional engineering teams to integrate security-by-design principles into cloud-native and on-premise application environments.

- Develop and maintain security policies, standards, and procedures that address evolving threat landscapes and regulatory compliance requirements.

- Provide expert advisory services to senior leadership regarding security investments, risk management strategies, and incident response preparedness.

- Mentor junior security analysts and consultants, fostering a culture of technical excellence and proactive threat hunting within the team.

Required Skillset:

- Demonstrated expertise in designing secure network and cloud architectures (AWS, Azure, or GCP) with a focus on zero-trust principles and identity management.

- Proven ability to conduct complex security audits and risk assessments, translating technical findings into clear, business-focused recommendations for non-technical stakeholders.

- Strong proficiency in security tooling, including SIEM, EDR, WAF, and vulnerability scanning platforms, with the ability to optimize these tools for specific client needs.

- Exceptional communication and interpersonal skills, essential for managing client expectations, leading technical workshops, and navigating high-pressure security incidents.

- A degree in Computer Science, Information Security, or a related field, complemented by professional certifications such as CISSP, CISM, or CCSP.

- Ability to thrive in a hybrid work environment based in Mumbai, balancing independent architectural work with collaborative team-based project delivery.