Role: Security Architect

Experience:
+ 10 years of experience Must have skills
• A bachelor's or master's degree in computer science, information technology, or a related field;
• Self-motivated and well-organised, with the ability to independently assess IT security incidents, projects, and improvement opportunities;
• Experience conducting risk assessments and producing related documentation within the pharmaceutical industry;
• Excellent written and verbal communication skills with an ability to communicate complex technical concepts to non-technical stakeholders in a clear and concise manner;
• The ability to manage multiple projects and priorities and meet deadlines in a fast-paced environment;
• Attention to detail and a commitment to quality work;
• Strong analytical and problem-solving skills, with an ability to think strategically and tactically about complex security issues;
• Deep understanding of security principles, risk modelling, threat mitigation, and how business strategy, risk, and regulation influence cybersecurity.
• Strong knowledge of OT/ICS security in a regulated manufacturing environment, including familiarity with IEC 62443, Purdue Model network segmentation, and securing SCADA/DCS and other industrial control systems.
• Experience of security frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework, CIS controls, and GDPR standards and regulations preferred.
• Experience with scripting languages like Python, Bash, or PowerShell.
• Strong operating system administration skills, particularly in Microsoft Windows Server and Red Hat Enterprise Linux (RHEL).
• Solid knowledge of security concepts, tools and frameworks, such as identity and access management, encryption, network security, security monitoring, logging, data loss protection, auditing, etc. Nice to have skills




• Knowledge with cloud security platforms like Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP).
• Experience with risk assessment methodologies and frameworks such as NIST Risk Management Framework (RMF), Factor Analysis of Information Risk (FAIR), ISO/IEC 27005, etc.
• Certifications in Azure, AWS, and/or cloud security, such as Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Cybersecurity Architect Expert, AWS Certified Solutions Architect, AWS Certified Security – Specialty, (ISC)² Certified Cloud
• For Internal Use
- Internal
• Security Professional (CCSP), (ISC)² Certified Information Systems Security Professional (CISSP), or equivalent. Responsibilities
• Design and implement security strategies and policies that meet Ferring’s specific needs;
• Review technical designs to identify security weaknesses and provide assistance on how to address them.
• Provide subject matter expertise on security across ongoing initiatives to the organization.
• Develop security architecture, strategy, planning, and problem-solving solutions on an enterprise level.
• Design, implement and maintain cloud security architecture and solutions for Azure and AWS with a strong focus on data security.
• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
• Document and address organization's information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition life cycle.
• Provide guidance and support to other architects, engineers and developers on security best practices and solutions.
• Research and evaluate new security technologies and trends.
• Ability to conceptualize, write and implement operational processes for security services.
• Reviews and approves configurations for systems, networks, and applications to ensure compliance with security standards.

📌 Information Security Architect (India)
🏢 CosMicIT
📍 India