Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Security Penetration Testing, MVC and Data Recovery
Good to have skills : NA
Minimum 12 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
As a Security Architect specializing in Minimum Viable Company (MVC) and Data & Cyber Recovery, the role involves defining, designing and operationalizing MVC and Data Recovery capabilities for the organization. This position helps identify the minimum set of critical business services, applications, infrastructure, data, identities and third-party dependencies required to maintain or restore essential operations following a ransomware attack, destructive cyber event or major business disruption. The role requires continuous collaboration with business continuity, crisis management, incident response, infrastructure, cloud and security teams to enable structured, secure and repeatable recovery.
Roles & Responsibilities:
Expected to be an SME, collaborate and manage the team to perform.
Responsible for team decisions and expected to provide solutions to problems that apply across multiple teams.
Engage with multiple teams and contribute on key decisions across MVC and data recovery operations.
Lead the development and refinement of security policies and procedures to enhance overall cyber resilience posture.
Facilitate knowledge sharing and mentorship within the team to foster professional growth and technical excellence.
Lead the definition and operationalization of the Minimum Viable Company — identifying critical business services, mapping dependencies, establishing recovery tiers and developing MVC governance, decision rights and crisis-time operating models.
Facilitate workshops with business, technology, security, risk, continuity and executive stakeholders to translate business requirements into technical recovery requirements and prioritized resilience investments.
Maintain alignment between MVC, business continuity, disaster recovery, incident response and crisis management.
Lead current-state assessments of data protection, backup, disaster recovery and cyber recovery capabilities develop enterprise cyber recovery strategies covering critical data, applications, infrastructure, cloud platforms and identity services.
Define and validate Recovery Time Objectives (RTO), Recovery Point Objectives (RPO) and recovery service expectations aligned with MVC priorities.
Design secure backup architecture, cyber recovery vaults, clean-room environments and isolated recovery capabilities assess backup capabilities for isolation, immutability, encryption, integrity and recoverability.
Establish end-to-end dependency maps for critical business services and develop sequenced recovery plans accounting for technical and business dependencies.
Integrate recovery plans with cyber incident response, digital forensics, crisis management and business continuity processes support command-center activities during ransomware and destructive cyber incidents.
Lead cyber recovery simulations, disaster recovery exercises and executive tabletop exercises document recovery issues, control gaps and lessons learned and track remediation through closure.
Provide leadership with evidence-based reporting on recovery readiness and residual risk.
Professional & Technical Skills:
Must To Have Skills: Proficiency in Minimum Viable Company (MVC) and Data & Cyber Recovery.
Strong knowledge of MVC concepts, critical business service identification and business impact and criticality assessments.
Strong capability in business-service and technology dependency mapping and sequenced recovery planning aligned to RTO/RPO objectives.
Experience designing or assessing enterprise cyber recovery capabilities including immutable and isolated backup principles, cyber recovery vaults and clean-room environments.
Experience with secure backup architecture design, recovery blueprints and dependency-based restoration sequences across on-premises, cloud and hybrid environments.
Knowledge of identity and privileged-access requirements, network segmentation, encryption and monitoring within recovery environments.
Understanding of ransomware recovery, compromised-backup scenarios and forensic-evidence preservation requirements.
Familiarity with Infrastructure as Code, configuration automation and recovery orchestration.
Skilled in communicating technical concepts clearly to both technical and non-technical stakeholders.
Additional Information:
The candidate should have a minimum of 12 years of overall cybersecurity experience, with hands-on expertise in Minimum Viable Company (MVC) and Data & Cyber Recovery.
This position is based at our Bengaluru office.
A 15 years full-time education is required.