Job Description
Cybersecurity Architect – Finacle SaaS (JL 6) Role Purpose The Cybersecurity Architect is responsible for designing, governing, and continuously improving the security architecture of Finacle SaaS deployments on public cloud platforms. This role ensures secure, compliant, and resilient multi-tenant banking environments by establishing security controls, architectural standards, risk frameworks, and operating models that protect customer data, cloud infrastructure, applications, and software supply chains.

Key Responsibilities
Security Architecture & Governance
• Define and maintain cloud security architecture, reference patterns, and security blueprints for Finacle SaaS.
• Design security controls for multi-tenant environments, ensuring tenant isolation and data protection.
• Govern security implementation across infrastructure, platform, network, identity, monitoring, and operational domains.
• Establish security guardrails for Kubernetes, containers, APIs, microservices, CI/CD pipelines, and cloud-native services. Cloud Security & Compliance
• Establish and maintain robust relationships with security, infrastructure, operations, and compliance SPOCs of cloud hosting providers.
• Ensure hosting environments comply with organizational security policies, regulatory requirements, industry standards, and customer contractual obligations.
• Translate regulatory and compliance requirements into technical security controls.
• Support audits, customer assessments, and regulatory reviews. Risk Management
• Conduct threat modeling, security architecture reviews, and risk assessments.
• Facilitate risk reviews,



drive remediation plans, and ensure timely risk treatment and closure.
• Assess security risks associated with third-party services, cloud providers, and technology platforms. Identity, Data & Infrastructure Security
• Define IAM, PAM, MFA, Zero Trust, and least-privilege access models.
• Establish encryption, key management, secrets management, and data protection standards.
• Govern infrastructure hardening, network segmentation, Kubernetes security, and cloud workload protection.
• Define cyber resilience, backup, disaster recovery, and business continuity security requirements. DevSecOps & Security Operations
• Establish Secure SDLC and DevSecOps standards.
• Govern implementation of SAST, DAST, SCA, container scanning, IaC security and software supply chain controls.
• Define monitoring, logging, SIEM, threat detection, and incident response architecture.
• Support incident investigations and drive security posture improvements. Required Qualifications
• 8-12 years of experience in cybersecurity, cloud security, and securing cloud-native or SaaS platforms.
• Experience in supporting banking, financial services, or highly regulated environments is highly desirable. Technical Expertise
• AWS, Azure, or GCP Security
• Kubernetes, Containers, Service Mesh
• IAM, PAM, MFA, PKI, KMS/HSM
• API Security, Network Security, WAF, DDoS Protection
• SIEM, SOAR, EDR/XDR
• DevSecOps and Software Supply Chain Security
• ISO 27001, NIST, OWASP, CSA CCM
• RBI, DPDP, CERT-In, PCI-DSS, SOC 2 Preferred Certifications CISSP, CCSP, CISM, SABSA, AWS Security Specialty, Azure Security Engineer

📌 Manager - Technology Management (India)
🏢 EdgeVerve Systems
📍 India