Lead - Security Architect - Network Security

- Implements security controls, risk assessment framework, and program that align to regulatory requirements, ensuring documented and sustainable compliance that aligns with business objectives.

- Implements processes, such as GRC (governance, risk and compliance), to automate and continuously monitor information security controls, exceptions, risks, testing. Develops reporting metrics, dashboards, and evidence artifacts.

- Evaluates risks and develops security standards, procedures, and controls to manage risks. Improves firm's security positioning through process improvement, policy, automation, and the continuous evolution of capabilities.

- Defines and documents business process responsibilities and ownership of the controls in GRC tool. Schedules regular assessments and testing of effectiveness and efficiency of controls and creates GRC reports.

- Updates security controls and provides support to all stakeholders on security controls covering internal assessments, regulations, protecting personal and client data assets.

- Performs and investigates internal and external information security risk and exceptions assessments. Assess incidents, vulnerability management, scans, patching status, secure baselines, penetration test result, phishing, and social engineering tests and attacks.

- Documents and reports control failures and gaps to stakeholders. Provides remediation guidance and prepares management reports to track remediation activities.

- Assists other staff in the management and oversight of security program functions.

- Trains, guides, and acts as a resource on security assessment functions to other departments within the firm.

- Remains current on best practices and technological advancements and acts as the firm's resource for security assessment and regulatory compliance.

Educational qualification:

- BE/Btech / MCA/ Graduation in computer science or similar stream

- CISA, CISM, ISO 27001 certification, desired