Role & responsibilities

Security Architecture Design:

- Design and implement robust security architecture for cloud, on-premises, and hybrid environments.
- Conduct internal architecture reviews to validate design adequacy, security controls, and alignment with Bank standards before implementation, followed by annual or half-yearly reviews based on criticality.
- Develop and enforce security policies, standards, and procedures across systems and applications.
- Define security requirements, understand data flows, and partner with teams to enable secure design and integration.

Risk Management & Compliance:

- Conduct risk assessments and recommend mitigation strategies.
- Ensure compliance with relevant regulatory frameworks, including ISO 27001, NIST, and PCI-DSS.
- Support audits and regulatory responses across DPSC, RBI Cybersecurity Framework, SEBI CSCRF, IT outsourcing, and digital lending requirements.

ATM Logical Security:

- Ensure ATM logical controls are aligned with Bank standards.
- Conduct periodic ATM security assessments covering vulnerabilities, host security, and control effectiveness.
- Perform governance reviews of ATM logical security controls.

Collaboration & Guidance:

- Act as a security advisor to business, IT, vendors, partners, and application teams.




- Lead threat modeling and security reviews for current systems, projects, and services.

Regulatory Reporting:

- Ensure timely and accurate submission of regulatory returns and reports, including Quarterly Cyber KRI and Tranche I, II, and III submissions.
- Maintain records of regulatory submissions, approvals, and RBI correspondence.

Training & Awareness:

- Conduct training and awareness on RBI regulations and compliance practices.
- Promote regulatory compliance and ethical conduct across the organization.

Monitoring & Response:

- Partner with Security Operations to enhance monitoring and incident response capabilities.
- Support security breach investigations and root cause analysis.

Security Tools & Technologies:

- Manage security solutions such as SIEM, EDR, WAF, and IAM.
- Track emerging cybersecurity trends, technologies, and threat landscapes.

Preferred candidate profile

- Bachelors degree in Computer Science, Cybersecurity, Information Technology, or a related field; Masters preferred.
- 10+ years of cyber security experience, including 5+ years in security architecture or engineering.
- Preferred certifications: CISSP, CISM, CISA, AWS/Azure/GCP Security Specialty, or equivalent.

📌 Security Architect (Mumbai)
🏢 SKILLVENTORY
📍 Mumbai