Summary of the role

- Act as a trusted security partner, supporting programs, products, platforms, and technology teams to meet defined security objectives.
- Provide specialist security expertise to Open Platform and related technology initiatives , ensuring security requirements are embedded throughout the architecture, development, and delivery lifecycle.
- Contribute to the development and continuous improvement of the Information Security Framework , security policies, standards, baselines, guidelines, and security architecture patterns.
- Support alignment of security risk posture with business strategy, CISO objectives, enterprise security strategy, and risk appetite .
- Provide security expertise across programs, projects, cloud platforms, and emerging technology initiatives, with a focus on secure-by-design principles.
- Help demonstrate the business value of security through effective governance, measurable security outcomes, metrics, and reporting.

Business Workplace You will join a global security function working closely with Open Platform, product, technology, architecture, engineering, and business teams across Amadeus .

The role focuses on enabling secure solutions while supporting innovation across cloud, AI, DevSecOps, and emerging technologies. The position will provide security expertise across Azure, AWS, and GCP environments and support the implementation of security capabilities aligned with enterprise security requirements and CISO objectives.

The role requires close collaboration with global security, architecture, engineering, compliance, risk, and business stakeholders to translate security and regulatory requirements into practical and scalable security solutions.

Key Responsibilities

- Guide and coordinate security activities for Open Platform , acting as a security point of contact for product, architecture, engineering, and delivery teams.
- Support alignment of Open Platform security initiatives with CISO objectives, enterprise security strategy, Information Security Framework, and defined risk appetite .
- Perform Security Architecture Reviews and Security HLD assessments for programs, projects, platforms, applications, cloud environments, and technology initiatives.
- Validate security design, architecture, processes, and technical controls across confidentiality, integrity, availability, identity, traceability, data protection, and resilience requirements.
- Translate Corporate Security Policies into local and domain-specific policies, standards, baselines, guidelines, security controls,



and architecture models .
- Perform security assessments and support compliance activities covering ISO 27001, PCI DSS, SOC 2, NIS2, GDPR, and applicable EU AI Act requirements .
- Identify security and compliance gaps, assess associated risks, define appropriate mitigation measures, and support remediation through established governance processes.
- Provide security expertise across Azure, AWS, and GCP , including cloud architecture, identity and access management, network security, workload security, data protection, logging and monitoring, and cloud-native security controls.
- Support and promote DevSecOps practices across engineering and delivery teams, including CI/CD security, application security testing, software composition analysis, container/Kubernetes security, secrets management, vulnerability management, and security automation.
- Drive the development and adoption of Security Policy as a Service capabilities, enabling platform and engineering teams to consume standardized security policies, controls, and security guardrails.
- Support the adoption of policy-as-code and automated security controls to enable consistent and scalable implementation of security requirements across technology environments.
- Conduct AI Security and AI Risk Assessments for AI/ML solutions, including LLM applications, RAG solutions, AI agents, and Agentic AI architectures.
- Assess AI solutions against security, privacy, data protection, identity and authorization, third-party dependency, model, application, and runtime risks, including applicable regulatory requirements.
- Provide security guidance for AI agent architectures , including agent identity, authorization, tool access, data access, secrets management, guardrails, monitoring, and runtime security.
- Contribute to the development of security automation and AI-enabled security capabilities , leveraging APIs, policy-as-code, automation, and AI agents to improve security assessments, compliance validation, and control enforcement.
- Develop and maintain reusable security architecture patterns, reference architectures, security baselines,



and secure-by-design guidelines for Open Platform and related technology initiatives.
- Support internal, customer, and regulatory assurance activities through security assessments, control validation, evidence preparation, risk analysis, and remediation tracking.
- Establish and maintain meaningful security metrics and reporting to demonstrate security posture, risk reduction, compliance status, and the business value of security initiatives.
- Provide security guidance and knowledge sharing to engineering, architecture, product, and delivery teams and promote a security-by-design culture across Open Platform.

Experience & Qualifications

- Bachelor's degree in computer science , Information Technology, Cybersecurity, Information Security, Engineering, or a related technical discipline.
- 10–13 years of experience in Information Security, Cybersecurity, Security Architecture, Cloud Security, Risk, Compliance, or related areas.
- Strong experience in security architecture, Security HLD reviews, security assessments, threat modelling, and secure-by-design principles .
- Good understanding of ISO 27001/ISMS, PCI DSS, SOC 2, NIS2, GDPR, and EU AI Act requirements.
- Practical understanding of security across Azure, AWS, and GCP .
- Experience with DevSecOps, CI/CD security, application security, container/Kubernetes security, vulnerability management, secrets management, and security automation .
- Understanding of AI/ML security, AI risk assessment, LLM security, RAG, Agentic AI, and AI agents .
- Knowledge of policy-as-code, security guardrails, automated security controls, and Security-as-a-Service models .
- Strong understanding of IAM, application security, cloud security, network security, data security, logging/monitoring, and vulnerability management .
- Strong analytical, communication, documentation, and stakeholder-management skills, with the ability to work effectively with architects, engineers, product teams, compliance teams, risk teams, and senior security leadership in a global environment.

Preferred Certification & Skills

- CISSP, or CISM, or CCSP, or equivalent security certification.
- ISO 27001 Lead Auditor / Lead Implementer certification.
- Experience developing security reference architectures, security frameworks, policies, standards, and reusable security patterns .
- Experience with AI security frameworks, AI threat modelling, AI governance, and AI risk management .
- Experience with security automation, policy-as-code, cloud-native security, and security APIs .

📌 Principal Information Security Engineer (Bengaluru)
🏢 ScaleneWorks People Solutions
📍 Bengaluru