Role Purpose: The Security Engineering & Architecture Lead will lead the design, governance and continuous evolution of the organization cyber security architecture, engineering standards and control framework. The role is accountable for ensuring that security requirements are embedded across infrastructure, applications, cloud platforms, data environments and emerging technologies. The role will act as the principal security architecture authority, enabling secure business transformation through risk-based security solutions, regulatory compliance, technology resilience and alignment with enterprise security strategy. Role Accountability A. Security Architecture, Standards & Design Governance
• Define and maintain security reference architectures for network, cloud, applications, identity, data, payment platforms, APIs and digital channels.
• Establish security design standards, approved patterns and reusable engineering blueprints aligned to enterprise risk, regulatory and internal control requirements.
• Lead security design reviews for major initiatives, technology changes, outsourcing arrangements and third-party integrations before production go-live.
• Own security architecture for cardholder data environments, transaction-processing systems and regulated technology platforms. B. Security Controls, Engineering Roadmap & Hardening
• Translate security control frameworks into implementable technology requirements across infrastructure, applications, cloud, identity and data environments.
• Govern security engineering roadmaps across endpoint security, IAM/PAM, data protection, vulnerability management, encryption, logging, telemetry and cloud security.
• Establish security baseline configurations and hardening standards, and drive enforcement through architecture reviews, automation and compliance checks.
• Define and govern cryptography, encryption, tokenization,



key management and certificate management standards across enterprise technology platforms. C. Secure-by-Design, Threat Modelling & Automation
• Drive threat modelling for critical applications, integrations and platforms, ensuring risks are documented, prioritized and tracked to closure.
• Partner with enterprise architecture, IT, platform and engineering teams to embed security-by-design into SDLC, infrastructure builds and cloud deployments.
• Drive adoption of automated security engineering practices, including policy-as-code, infrastructure-as-code security checks and automated baseline compliance. D. Governance, Exceptions & Continuous Improvement
• Maintain the security exceptions register, including expiry dates, compensating controls, risk acceptance and closure mechanisms.
• Partner with SOC, vulnerability management and incident response teams to convert threat intelligence, incidents and recurring control failures into improved architecture patterns.
• Ensure security architecture inputs are embedded into enterprise architecture forums, technology design authorities and change governance processes.
• Lead security engineering teams and vendors, ensuring delivery quality, documentation, knowledge transfer and adherence to approved standards. Measures of Success
• Approved security architecture patterns are available and used across key technology domains.
• Major technology changes are security-reviewed before go-live with explicit risk decisions.
• Security design gaps reduce across cloud, infrastructure, applications, APIs,



identity and data platforms.
• Critical payment, digital and regulated platforms follow defined security architecture standards.
• Security exceptions reduce through better design standards, compensating controls and closure tracking.
• Security baselines and hardening standards are translated into implementable engineering requirements.
• Architecture decisions, control mappings and exceptions remain documented and audit-ready. Technical Skills
• Application, API & DevSecOps Security Architecture
• Cyber Resilience & Crisis Strategy Leadership
• Database, Infrastructure & Network Security Architecture
• Program Strategy, Portfolio Governance & Executive Reporting
• Security & AI Governance, & Policy Interpretation
• Security Architecture Governance & Secure Design Assurance
• AI/ML, GenAI & Emerging Technology Security Architecture
• Security Engineering, Tooling & Platform Integration Exposure to below mentioned Technologies / Frameworks / Methodologies
• SABSA
• TOGAF
• NIST CSF
• ISO 27001 / ISO 27002
• CIS Controls
• NIST SSDF
• STRIDE / PASTA threat modelling
• Security reference architectures
• Architecture review boards
• GRC platforms
• Cloud security guardrails
• DevSecOps security standards
• Infrastructure-as-code scanning tools
• SAST / DAST / SCA tools Qualification Bachelor’s degree / B.
E. / B.
Tech in Computer Science, Information Technology, Cyber Security, Information Security or related engineering discipline; Additional academic exposure, Executive education or equivalent experience in security architecture, enterprise architecture or technology risk preferred. Preferred Industry: BFSI, payments, banking, NBFC, fintech, large regulated enterprises with complex cloud, API, digital platform and customer data environments.

📌 Deputy Vice President (Gurugram)
🏢 Sbi Card
📍 Gurugram