Role: IT Security Architect

Start Date: ASAP

Location: Remote

Context:

The Information Security Architect will support the Head of Information Security in designing, implementing, and strengthening the organization's security architecture as part of a business carve-out and Azure tenant separation program.

The role requires hands-on experience in business carve-outs, Azure tenant separation, and security architecture, ensuring that security is embedded throughout the transformation.

Key Responsibilities

Information Security Strategy & Governance

- Define, maintain, and communicate the organization's information security strategy, policies, standards, and control framework.
- Establish and lead the Information Security Program, ensuring alignment with business objectives, regulatory obligations, and industry best practices.
- Obtain executive leadership approval for security initiatives and ensure ongoing alignment with Board-approved risk appetite.
- Develop and maintain security governance structures, reporting mechanisms, and decision-making forums.
- Create and manage security policies, standards, procedures, and governance documentation.

Security Architecture & Azure Tenant Design

- Own the security architecture and design for the new Azure tenant environment.
- Define and implement identity and access management controls, conditional access policies, privileged access management, and Zero Trust security principles.
- Ensure security requirements are embedded into the design and deployment of all new platforms and services.
- Establish tenant security boundaries and governance controls to support secure business separation.
- Deliver a Day-1-ready security architecture that supports business operations immediately upon transition.

Carve-out & Transformation Security





- Ensure security-by-design principles are applied throughout the carve-out and migration lifecycle.
- Review, challenge, and approve migration and transformation initiatives from a security risk perspective.
- Identify and remove inherited security dependencies on the source organization.
- Provide security oversight and assurance across all technology workstreams involved in the separation program.
- Validate security controls before, during, and after migration activities.

Identity, Access & Tenant Security Governance

- Maintain governance over identity services, authentication mechanisms, access controls, and tenant security boundaries.
- Ensure appropriate segregation of duties and least-privilege access principles are implemented.
- Oversee the establishment of secure identity management processes and privileged access controls.
- Govern user lifecycle management and access certification processes.

Security Operations & Incident Management

- Lead Security Operations Center (SOC) onboarding and operationalization activities.
- Establish security monitoring, detection, alerting, and response capabilities.
- Define and implement incident response procedures, escalation paths, and crisis management processes.
- Ensure effective integration of security operations with business and IT support functions.
- Coordinate security incident investigations and post-incident reviews.

Risk Management & Compliance

- Establish and maintain the organization's security risk register.




- Define the compliance baseline and security control requirements applicable to the recent organization.
- Conduct risk assessments for technology, business, and transformation initiatives.
- Monitor compliance with regulatory, contractual, and internal security requirements.
- Report security risks, compliance status, and remediation activities to executive stakeholders.

Key Deliverables

- Information Security Strategy and Roadmap
- Security Policies, Standards, and Governance Framework
- Azure Tenant Security Architecture (Day 1 Ready)
- Identity and Access Management Governance Model
- Security Risk Register and Compliance Baseline
- Security Operations Center (SOC) Operating Model
- Incident Response and Escalation Framework
- Security Assurance and Risk Assessments for Migration Activities
- Tenant Separation Security Controls and Governance

Required Experience

- Extensive experience leading enterprise information security programs.
- Strong expertise in Microsoft Azure security architecture, identity management, and Zero Trust principles.
- Proven experience supporting mergers, acquisitions, divestitures, carve-outs, or tenant separation initiatives.
- Experience establishing security governance, risk management, and compliance frameworks.
- Strong understanding of SOC operations, incident response, and cyber security monitoring.
- Experience engaging with executive leadership, boards, regulators, and external auditors.

Key Skills

- Information Security Governance
- Security Architecture
- Azure Security & Cloud Security
- Identity & Access Management (IAM)
- Zero Trust Architecture
- Risk Management
- Regulatory Compliance
- Security Operations (SOC)
- Incident Response
- Stakeholder Management
- Program Leadership
- Security-by-Design

📌 IT Security Architect (India)
🏢 ATCON GLOBAL
📍 India