Cyber Security Architect

Overview

Define and evolve the security architecture for WPP's technology landscape, embedding security, resilience and compliance into designs, with a strong focus on Security Operations architecture within the Cyber Risk and Compliance function.

What you'll do

• Develop, maintain, and communicate the domain-specific security architecture vision, strategy, and roadmap, aligned with WPP's enterprise security strategy and business goals.
• Provide expert architectural guidance and oversight for key projects and initiatives, advocating secure design principles, patterns, and practices throughout the software development lifecycle.
• Ensure architectural designs and implementations adhere to relevant regulatory compliance frameworks (e.g., GDPR, CCPA, ISO 27001) and internal security policies.
• Participate in security audits and assessments, translating findings into actionable architectural improvements.
• Conduct architectural risk assessments and threat modelling within the domain, identifying vulnerabilities and recommending mitigating controls.
• Integrate risk management practices into architectural decision-making.
• Embed advanced cybersecurity concepts, technologies, and best practices (e.g., identity and access management, data protection, network security, incident response capabilities) into the domain's architecture.
• Define and promote security architecture standards, guidelines, and reusable patterns for the domain.
• Create associated designs and artefacts as the requirement arises.
• Work closely with Enterprise Architects, Security Operations, CISO office, Development Teams, Product Owners, and Legal/Compliance to translate security requirements into technical solutions and gain consensus on architectural direction.
• Research, evaluate, and recommend new security technologies and architectural approaches to enhance the security posture and efficiency of the domain.
• Create clear, concise, and comprehensive security architecture documentation, including diagrams, principles, and decision records.
• Effectively communicate complex security concepts to technical and non-technical audiences.
• When required, form, lead and contribute to successful delivery of specific security solutions and workstreams.

What you'll need

• Bachelor's or master's degree in computer science, Information Security, or a related field.
• Proven experience (2+ years) as an Enterprise Architect, Domain Architect, or Security Architect in a large, complex enterprise environment.
• Deep understanding and practical experience with security architecture frameworks (e.g., NIST, SABSA, TOGAF-ADM with security overlays) and industry best practices.
• Strong understanding of contemporary cybersecurity threats, attack vectors, and defence mechanisms.
• Experience with security domains including application security, infrastructure security, data security, cloud security (AWS, Azure, GCP), and identity management.
• Solid knowledge of data privacy regulations (e.g., GDPR, CCPA) and other relevant industry compliance standards (e.g., ISO 27001, SOC 2).
• Demonstrated ability to perform security risk analysis, articulate risks to stakeholders, and propose effective architectural mitigations.
• Exceptional analytical skills to decompose complex security challenges into manageable architectural solutions.
• Excellent verbal and written communication skills, with the ability to influence technical teams and senior leadership on security architectural direction.

Nice to have

• Relevant industry certifications such as CISSP, CISM, SABSA, TOGAF, or CCSP.
• Experience within the advertising, media, or professional services industry.
• Hands-on experience with security tools and technologies.

Details

• Location: Chennai.
• Hybrid working, with teams in the office around four days a week.