Application Security Architect (Mumbai)

Application Security Architect (Mumbai)

23 Aug
|
Impellam Group
|
Mumbai

23 Aug

Impellam Group

Mumbai

Job Title: Security Architect

Location: Mumbai, Maharashtra (Hybrid)

Summary of Role

The Security Architect owns the secure architecture and design assurance theme within WTW's Application Security Centre of Excellence in HWC Technology, one of the three practices the COE executes directly. The role closes the secure-architecture finding from the OWASP SAMM assessment across the top platforms by performing independent, objective architecture reviews and ensuring that architecture and design artefacts explicitly reference the applicable security standards and design principles. The individual defines the review methodology, inputs and triggers, validates vendor outputs against WTW's own standards, and works with Enterprise Architecture to settle where secure-architecture review sits for the long term. Reporting to the Application Security CoE Lead, the role operates in line with DORA, CAP, NIST, OWASP, ISO 27001 and InfoSec guardrails.

The Role
- Secure Architecture Review Practice & Methodology
- Define and own the secure-architecture-review (SAR) methodology,



the inputs required to enable a review, and the triggers that instigate one.
- Ensure architecture and design artefacts explicitly reference security standards and secure-design principles, and provide the independent, objective assessment that today is lacking.
- Define what “done” looks like and validate outputs against NIST, OWASP, ISO 27001 and SAMM thresholds with ICS and external audit.
- Delivery across the top platforms
- Lead secure architecture reviews across the in-scope platforms for the Health & Perks Platform and Work & Rewards.
- Review and uplift vendor architecture-review outputs so they draw on WTW's own InfoSec policies and standards rather than reading as off-the-shelf.
- Own end-to-end closure of the secure-architecture SAMM finding and the ongoing ownership mechanism after vendor hand-off.
- Embedding into the SDLC & AI Enablement
- Embed secure-by-design practice, reference archit

📌 Application Security Architect (Mumbai)
🏢 Impellam Group
📍 Mumbai

Reply to this offer

Impress this employer describing Your skills and abilities, fill out the form below and leave Your personal touch in the presentation letter.

Subscribe to this job alert:

Get the latest job offers by email for: application security architect (mumbai) / mumbai