Security Architect - Regulatory Compliance & ATM Logical Security - Bank

Security Architecture Design :

- Design and implement robust security architecture for cloud, on-premises, and hybrid environments.

- Define security requirements and collaborate with teams to ensure secure system design, privacy principles, and integration.

- Incorporate Zero Trust Architecture, API security, and emerging technologies into design strategies.

Risk Management & Compliance :

- Conduct risk assessments and recommend mitigation strategies.

- Ensure compliance with relevant regulatory frameworks (e.g., ISO 27001, NIST, PCI-DSS).

- Support audits and respond to security-related inquiries, regulatory compliance (e.g. DPSC, RBI Cybersecurity Framework, SEBI CSCRF, IT outsourcing guidelines digital lending norms).

ATM Logical Security :

- Ensure Logical controls on all the bank ATM terminals are inline to bank standard.

- Perform periodic ATM security assessment covering Vulnerability management, Host level security etc.

- Perform periodic Governance of the ATM logical security controls.

Collaboration & Guidance:

- Serve as a security advisor to business units, IT, Business partners, Vendors and Application teams.

- Lead threat modeling exercises and provide security reviews for new systems, Projects or services.

Regulatory Reporting :

- Ensure timely and accurate submission of periodic and ad-hoc returns, statements, and reports of regulatory submissions like Quarterly Cyber KRI, Tranche I, Tranche II, Tranche III etc.

- Maintain records of all regulatory submissions, approvals, and correspondences with RBI.4

Training & Awareness :

- Conduct training sessions and awareness programs on RBI regulations and compliance best practices.

- Promote a culture of regulatory compliance and ethical conduct across the organization.

Monitoring & Response :

- Collaborate with Security Operations to develop and improve monitoring and incident response capabilities.

- Assist in the investigation of security breaches and help with the root cause analysis.

Security Tools & Technologies :

- Manage security solutions such as SIEM, EDR, WAF, IAM etc.

- Stay up to date on the latest cybersecurity trends, technologies, and threat landscapes.