Cybersecurity Architect

Location: Bangalore, India

Experience: 8+ Years

Job Type: [Full-Time / Permanent / Hybrid / Remote-Optional]

Department: Cybersecurity / Risk & Compliance

We are seeking an experienced Cybersecurity Architect with strong expertise in Governance, Risk, and Compliance (GRC) to lead our enterprise security architecture and GRC initiatives. The ideal candidate will possess deep technical knowledge across cybersecurity domains and be capable of aligning security strategies with business and compliance goals.

• Develop and maintain cybersecurity architecture frameworks aligned with industry standards (e.g., NIST, ISO 27001, CIS, TOGAF).
• Drive and manage GRC programs, including risk assessments, control frameworks, policy development, and regulatory compliance.
• Evaluate and design security controls across cloud, network, endpoint, and application environments.
• Conduct regular threat modeling, risk assessments, and security architecture reviews.
• Define and implement cybersecurity governance policies, standards, and procedures.
• Collaborate with IT, DevOps, legal, audit, and business teams to ensure security and compliance across all systems.
• Manage third-party/vendor risk management, ensuring suppliers adhere to security requirements.
• Provide guidance on regulatory and compliance standards (e.g., GDPR, HIPAA, SOX, RBI, SEBI).
• Lead security awareness and training programs across business units.
• Support incident response and recovery planning from a risk and compliance standpoint.

• 8+ years of experience in cybersecurity, with a minimum of 3+ years in a security architecture or GRC leadership role.
• Strong understanding of cybersecurity frameworks and standards (ISO 27001/2, NIST, COBIT, CIS).
• Experience with GRC platforms (e.g., Archer, ServiceNow GRC, MetricStream).
• In-depth knowledge of cloud security architecture (AWS, Azure, or GCP).
• Familiarity with data protection laws and regulatory requirements in India and globally.
• Proven ability to perform security risk assessments and manage risk remediation plans.
• Hands-on experience with security tools and technologies (SIEM, DLP, IAM, CASB, etc.).
• Excellent communication and stakeholder management skills.
• Ability to create high-quality documentation, reports, and presentations for technical and executive audiences.

• CISSP, CISA, CRISC, CISM, CCSP, or SABSA.
• ISO 27001 Lead Auditor or Lead Implementer.
• TOGAF or other enterprise architecture certifications.