Enterprise Cyber Security Architect

We are Hiring for a Leading Manufacturing Company.

Job role:-

Enterprise Cyber Security Architect

Experience:-

15+years

Location:-

Mumbai (WFO)

Qualification:-

Bachelor’s/Master’s in Cybersecurity, IT, or related field

Certifications:-

CISSP/CISA preferred, with additional certifications such as CEH or OSCP as an advantage.

Key Responsibilities Security Architecture & Strategy • Define and maintain enterprise security architecture aligned with business and risk objectives. • Develop security roadmaps across cloud, on-prem, and OT environments. • Establish architecture standards, frameworks, and reusable security patterns. • Define baseline controls for OS, networks, IAM, encryption, data protection etc.

Architecture Assurance & Risk Management • Conduct architecture reviews, threat modeling, and risk assessments. • Validate security posture across infrastructure, applications, and network controls. • Ensure secure design in projects, DevOps pipelines, and cloud deployments. • Drive compliance with internal policies and regulatory/security standards.

AI Security & AI Infrastructure (Added) • Understanding of AI/ML security risks, including model poisoning, adversarial attacks, data leakage, and model integrity risks. • Experience securing AI/ML pipelines, including data ingestion, model training, validation, and deployment. • Familiarity with AI governance, responsible AI practices, and regulatory considerations. • Knowledge of securing AI infrastructure, including GPU-based workloads, MLOps platforms, APIs, and model access controls. • Ability to integrate AI security within broader enterprise security architecture and Zero Trust frameworks.

Governance & Stakeholder Management • Participate in governance forums (CAB, architecture boards, technology councils). • Collaborate with CISO, IT, DevOps, Risk, Audit, and Business teams. • Support vendor risk assessments and review third-party security controls. • Act as a key liaison across enterprise architecture, security operations, and engineering.

Security Engineering & Enablement • Guide implementation of security technologies (EDR, SIEM, WAF, IAM, NAC, DLP). • Ensure secure adoption of Zero Trust, cloud security, and modern architectures. • Define secure coding practices and support DevSecOps adoption. • Stay updated on emerging threats, tools, and best practices.

Key Outcomes / Deliverables • Enterprise security architecture framework and roadmap. • Improved security posture and reduced risk exposure. • Secure onboarding of applications, infrastructure, and cloud services. • Strengthened compliance and audit readiness.

Required Experience & Expertise: • Proven ability in security strategy development, roadmap planning, stakeholder engagement, and executive communication, along with strong financial acumen (TCO, ROI, vendor evaluation) and project/program management skills. • Deep knowledge of enterprise security technologies (Firewalls, IPS, WAF, SIEM, EDR, DLP, NAC), cloud and Zero Trust architectures (Azure/AWS, Zscaler), IAM (AD, LDAP, Azure AD, ITDR), threat modeling, and vulnerability management. • Strong understanding of IT infrastructure (networks, OS, databases, virtualization, containers) and exposure to OT/IoT security solutions (e.g. Claroty, Nozomi, SCADAFence).