Security Architect

Overview

Lead and support the design, implementation and maintenance of security governance, risk and compliance (GRC) frameworks for the client UBS, ensuring compliance with industry standards and regulations such as ISO/IEC 27001.

What you'll do

• Define the cloud security framework and architecture, ensuring it meets business requirements and performance goals.
• Document the implementation of cloud security controls and transition to cloud security-managed operations.
• Perform risk assessments with a focus on access controls, including access rights/entitlements and location-aware access controls.
• Perform solution reviews of applications, especially location-aware access control implementations.
• Contribute to process changes arising from design reviews and respond to queries related to applicable controls.
• Provide advisory, guidance and assessment of applications.
• Coordinate and support internal and external security audits, including evidence collection and remediation planning.
• Partner with business, IT and legal teams to ensure compliance requirements are understood and implemented.
• Develop and maintain security policies, procedures and documentation in line with regulatory needs.

What you'll need

• Proficiency in security compliance management.
• Minimum 3 years of experience in security compliance management.
• 4+ years of experience in risk assessment/management.
• Strong knowledge of cloud security principles and best practices.
• Experience designing and implementing security controls within cloud environments.
• Ability to analyze security risks and develop mitigation strategies.
• Good understanding of access control, including role-based access control, attribute-based access control and location-aware access control.
• Good understanding of the application/product landscape.
• Good communication and stakeholder management skills.
• Some working experience with ISO 27001.
• 15 years full-time education.

Nice to have

• Any one of: ISO27001 LA/LI, ISO31000, or CISA, CISM, CRISC, or equivalent certification.

Details

• Based at the Hyderabad office.