Role: Security Architect

Experience: + 10 years of experience

Must have skills

- A bachelor's or master's degree in computer science, information technology, or a related field;
- Self-motivated and well-organised, with the ability to independently assess IT security incidents, projects, and improvement opportunities;
- Experience conducting risk assessments and producing related documentation within the pharmaceutical industry;
- Excellent written and verbal communication skills with an ability to communicate complex technical concepts to non-technical stakeholders in a clear and concise manner;
- The ability to manage multiple projects and priorities and meet deadlines in a fast-paced environment;
- Attention to detail and a commitment to quality work;
- Strong analytical and problem-solving skills, with an ability to think strategically and tactically about complex security issues;
- Deep understanding of security principles, risk modelling, threat mitigation, and how business strategy, risk, and regulation influence cybersecurity.
- Strong knowledge of OT/ICS security in a regulated manufacturing environment, including familiarity with IEC 62443, Purdue Model network segmentation, and securing SCADA/DCS and other industrial control systems.
- Experience of security frameworks such as ISO/IEC 27001, NIST Cybersecurity Framework, CIS controls, and GDPR standards and regulations preferred.
- Experience with scripting languages like Python, Bash, or PowerShell.
- Strong operating system administration skills, particularly in Microsoft Windows Server and Red Hat Enterprise Linux (RHEL).
- Strong knowledge of security concepts, tools and frameworks, such as identity and access management, encryption, network security, security monitoring, logging, data loss protection, auditing, etc.

Nice to have skills

- Knowledge with cloud security platforms like Microsoft Azure,



Amazon Web Services (AWS), and Google Cloud Platform (GCP).
- Experience with risk assessment methodologies and frameworks such as NIST Risk Management Framework (RMF), Factor Analysis of Information Risk (FAIR), ISO/IEC 27005, etc.
- Certifications in Azure, AWS, and/or cloud security, such as Microsoft Certified: Azure Security Engineer Associate, Microsoft Certified: Cybersecurity Architect Expert, AWS Certified Solutions Architect, AWS Certified Security – Specialty, (ISC)² Certified Cloud
- For Internal Use - Internal
- Security Qualified (CCSP), (ISC)² Certified Information Systems Security Professional (CISSP), or equivalent.

Responsibilities

- Design and implement security strategies and policies that meet Ferring’s specific needs;
- Review technical designs to identify security weaknesses and provide assistance on how to address them.
- Provide subject matter expertise on security across ongoing initiatives to the organization.
- Develop security architecture, strategy, planning, and problem-solving solutions on an enterprise level.
- Design, implement and maintain cloud security architecture and solutions for Azure and AWS with a strong focus on data security.
- Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
- Document and address organization's information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition life cycle.
- Provide guidance and support to other architects, engineers and developers on security best practices and solutions.
- Research and evaluate new security technologies and trends.
- Ability to conceptualize, write and implement operational processes for security services.
- Reviews and approves configurations for systems, networks, and applications to ensure compliance with security standards.

📌 Information Security Architect (India)
🏢 CosMicIT
📍 India