Associate Director- GTS Security Architect

Roles & responsibilities

• Security Architecture & Design

Own, govern, and continuously evolve security architecture standards, patterns, reference architectures, and implementation guidance.
Ensure security requirements are integrated throughout the Secure/System Development lifecycle (S/SDLC).
Review and approve solution architectures and act as the final design authority for enterprise security standards.
Define security requirements for cloud-native, hybrid-cloud, SaaS, and on-premises solutions.
Design security architectures that support confidentiality, integrity, availability, and regulatory compliance requirements.
Set the technology direction by evaluating emerging technologies and recommending security controls and architectures to mitigate risks.

• Cloud Security & DevSecOps

Act as the principal Subject Matter Expert (SME) for cloud security across Azure, AWS, and GCP.
Provide guidance on secure cloud architecture, workload protection, identity security, data protection, and network security.
Partner with engineering teams to integrate security controls into CI/CD pipelines and DevSecOps processes.
Promote Infrastructure-as-Code (IaC) security practices and automated security validation.

• Risk & Compliance

Lead security architecture reviews and identify design-level risks across the portfolio.
Develop remediation recommendations and risk treatment strategies.
Support industry standard compliance e.g. SOC 1 / SOC 2, ISO, COBIT, NIST, CIS, GDPR.
Define and implement compensating controls where required.
Partner with risk management and audit leadership to address security findings and drive remediation to closure.

• Application Security

Review application designs for secure coding and architectural vulnerabilities.
Partner with development teams to implement secure development lifecycle practices.
Evaluate authentication, authorization, encryption, API security, and secrets management strategies.
Support threat modeling exercises and security design reviews.
Assess application architectures against OWASP Top 10 and industry best practices.

• Security Governance

Own and mature the security architecture governance process across the organization.
Chair or lead architecture review boards and change advisory activities.
Ensure alignment between business objectives and cybersecurity requirements.Support development and maintenance of security policies, standards, and technical guidelines.