Description :

Title - Security Architect

Exp - 5 - 10 years

Location - Delhi 

Job Description:

Security Strategy Development: Develop and maintain the organization's overall security strategy, aligning it with business objectives, regulatory requirements, and industry best practices.

Security Architecture Design: Design and implement security architecture solutions that encompass network security, cloud security, application security, endpoint security, identity and access management, encryption, and data protection.

Risk Assessment and Management: Conduct risk assessments to identify security vulnerabilities and threats, and develop risk mitigation strategies to address them, including security controls, policies, and procedures.

Security Standards and Compliance: Define security standards, guidelines, and best practices based on industry standards (e.g., ISO 27001, NIST, CIS) and regulatory requirements (e.g., GDPR, HIPAA, PCI DSS), and ensure compliance with these standards across the organization.

Security Technology Evaluation: Evaluate and recommend security technologies, tools, and solutions to enhance the organization's security posture, considering factors such as effectiveness, scalability, interoperability, and cost.

Security Incident Response: Develop and maintain incident response plans and procedures to effectively respond to cybersecurity incidents, including incident detection, analysis, containment, eradication, and recovery.

Security Awareness and Training: Develop and deliver security awareness and training programs to educate employees and raise awareness about cybersecurity risks, best practices, and policies.

Security Governance: Establish and maintain security governance processes, including security policies, standards, procedures, and guidelines, and ensure their enforcement throughout the organization.

Collaboration and Communication: Collaborate with cross-functional teams, including IT, legal, compliance, risk management, and business units, to address security requirements and concerns, and effectively communicate security-related information to stakeholders.