Corporate Security Architect

This is a fully remote position, open to applicants in India.

📋 Description

• Carry out security evaluations of third-party vendors, suppliers, and service providers.

• Analyze SOC 2 reports, ISO 27001 certifications, penetration testing documentation, security questionnaires, and architectural plans.

• Evaluate controls related to data protection, identity and access management (IAM), infrastructure security, incident response, and business continuity.

• Record findings, risk assessments, remediation suggestions, and approval outcomes.

• Conduct security reviews of SaaS platforms, enterprise applications, and corporate technological solutions.

• Assess authentication, authorization, data management, integrations, logging, monitoring, and overall security posture.

• Evaluate emerging technologies, including AI-driven solutions.

• Carry out assessments in line with established standards and procedures.

• Keep thorough documentation of assessments, evidence, findings, and recommendations.

• Monitor remediation efforts and the status of assessments.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or a related discipline.

• Over 8 years of experience in Information Security, Security Architecture, Risk Management, or Corporate Security.

• Familiarity with managing Third-Party Risk Management (TPRM) or Third-Party Risk Assessment (TPRA) programs.

• Experience in conducting security reviews of SaaS applications, cloud services, and enterprise technologies.

• Strong grasp of NIST Cybersecurity Framework (CSF), ISO 27001, SOC 2, CIS Controls, cloud security principles, and IAM.

• Experience in reviewing vendor security documents and conducting risk-based assessments.

• Excellent written communication skills and experience engaging with cross-functional stakeholders.

🏝️ Benefits

• Health insurance

• Retirement plans

• Paid time off

• Flexible work arrangements

• Professional development