Job Description
<p><p><b>About the Role :</b></p><p><p><b><br/></b></p>We are seeking a seasoned Enterprise Security Architect to lead the design and implementation of comprehensive security solutions across our enterprise.<br/><br/></p><p>The ideal candidate will have a deep understanding of security architecture frameworks and hands-on experience in developing secure infrastructure and applications to protect critical business assets.<br/><br/></p><p>This role is pivotal in shaping our cybersecurity strategy, ensuring compliance, and mitigating risks in an increasingly complex threat landscape.</p><p><br/><b>Key Responsibilities :</b></p><p><p><b><br/></b></p>- Develop, maintain, and enforce enterprise-wide security architecture strategies, frameworks, standards, and guidelines.<br/><br/></p><p>- Design and implement security solutions encompassing network security, identity and access management, data protection, endpoint security, cloud security, and application security.<br/><br/></p><p>- Collaborate with IT, development, and operations teams to embed security best practices throughout the software development lifecycle (SDLC) and IT operations.<br/><br/></p><p>- Assess emerging security threats and technologies, conducting risk assessments and gap analyses to inform mitigation strategies.<br/><br/></p><p>- Lead security architecture reviews, threat modeling, and vulnerability assessments for new and existing systems.<br/><br/></p><p>- Provide expert guidance on compliance with industry standards and regulations such as ISO 27001, NIST, GDPR, HIPAA, PCI-DSS, etc.<br/><br/></p><p>- Drive the integration of security tools and technologies including firewalls, IDS/IPS, DLP, SIEM, IAM, encryption, and endpoint protection.<br/><br/></p><p>- Mentor and train technical teams on security principles and emerging threats.<br/><br/></p><p>- Partner with stakeholders across the enterprise to align security initiatives with business goals and risk appetite.</p><p><br/><b>Required Skills & Experience :</b></p><p><p><b><br/></b></p>- 8+ years of experience in cybersecurity, with a focus on enterprise security architecture.<br/><br/></p><p>- Strong knowledge of security frameworks and standards (e.g., NIST, ISO 27001, CIS, OWASP).<br/><br/></p><p>- Hands-on experience with cloud security (AWS, Azure, GCP), network security, identity management, and endpoint protection.<br/><br/></p><p>- Expertise in security technologies including firewalls, VPN, IAM, SIEM, DLP, encryption, and vulnerability management tools.<br/><br/></p><p>- Experience designing and implementing security architectures in complex, hybrid IT environments.<br/><br/></p><p>- Proven ability to conduct threat modeling, risk assessments, and security audits.<br/><br/></p><p>- Excellent communication skills, capable of conveying complex security concepts to technical and non-technical audiences.<br/><br/></p><p>- Relevant certifications such as CISSP, CISM, TOGAF, SABSA, or equivalent</p><br/></p> (ref:hirist.tech)