Job Summary

Job Title: Principal Information Security Specialist

Responsibilities

Security Architecture Design

- Define enterprise Data Protection reference architectures and security design patterns.
- Embed Security-by-Design and Privacy-by-Design principles into the SDLC and project lifecycle.
- Review solution architectures and recommend appropriate data protection controls.
- Perform architecture governance during project initiation, design, implementation, and production readiness reviews.
- Develop security standards and guidelines.
- Create detailed architecture diagrams and documentation using visualization tools.
- Collaborate with security engineering teams to integrate security requirements into the software development lifecycle.
- Perform security risk assessments and threat modeling exercises.
- Support audit activities and compliance reporting.
- Manage security architecture projects and initiatives using Jira for tracking and workflow management.
- Maintain comprehensive documentation in Confluence including security standards, procedures, and knowledge base articles.
- Provide security guidance and recommendations to stakeholders.
- Participate in architecture review boards and security committees.

Data Lifecycle Protection

- Understand and assess data throughout its lifecycle:
- Data Creation
- Data Collection
- Data Discovery
- Data Classification
- Data Storage
- Data Processing
- Data Sharing
- Data Retention
- Data Archival
- Secure Disposal

- Identify risks at every lifecycle stage and recommend appropriate protection mechanisms.

Data Protection Technologies





Design and provide architectural guidance for:

- Enterprise Data Discovery
- Information Classification Labeling
- Microsoft Purview Information Protection
- Data Loss Prevention (Endpoint, Email, Cloud, Network)
- Information Rights Management (IRM)
- Encryption (Data at Rest, In Transit, In Use)
- Tokenization
- Static Agile Data Masking
- Database Security Controls
- Key Management Systems (KMS)
- Certificate Lifecycle Management
- Secrets Management
- Hardware Security Modules (HSM)
- Cloud-native data protection capabilities

Project Solution Advisory

- Participate in project design workshops.
- Perform security architecture reviews.
- Define mandatory security controls for new applications.
- Identify security design gaps and provide remediation recommendations.
- Review High-Level Designs (HLD) and Low-Level Designs (LLD).
- Provide implementation guidance to engineering teams.
- Support threat modelling focused on data protection risks.

Governance Compliance

- Ensure alignment with enterprise Data Security and Cryptography Standards.
- Support Secure Architecture Evaluation and project governance forums.
- Validate adherence to regulatory requirements such as GDPR, DPDP, MAS, DORA, JFSA, etc.
- Define architecture guardrails and security exceptions where required.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Principal Information Security Specialist (Mumbai)
🏢 Nomura
📍 Mumbai