Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Data Loss Prevention (DLP)
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : Bachelor or college degree in related field or equivalent work experience

Summary: As a Security Architect, you will be responsible for defining the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve documenting the implementation of the cloud security controls and transitioning to cloud security-managed operations, with a focus on Data Loss Prevention (DLP) as the primary skill. Roles & Responsibilities: - Lead the design and implementation of cloud security controls, with a focus on Data Loss Prevention (DLP) as the primary skill. - Collaborate with cross-functional teams to ensure the cloud security framework and architecture meets business requirements and performance goals. - Document the implementation of cloud security controls and transition to cloud security-managed operations. - Provide technical guidance and support to project teams on cloud security best practices and standards. - Stay updated with the latest advancements in cloud security and DLP technologies, integrating innovative approaches for sustained competitive advantage. Professional & Technical Skills: Strategy Development: Develop and implement a comprehensive strategy for Data Loss Prevention, including defining goals, objectives, and priorities for protecting sensitive data across the organization's network, endpoints, and cloud environments. Solution Implementation: Lead the design, deployment, and configuration of DLP solutions, including hardware appliances, software agents, and cloud-based services, to monitor and enforce data protection policies effectively. Policy Development: Develop and implement DLP policies, rules, and classification schemes to identify and prevent unauthorized access, transmission, or storage of sensitive data. Ensure that DLP policies align with regulatory requirements, industry standards, and organizational goals. Incident Response: Develop and maintain incident response procedures for DLP incidents, including investigating suspected data breaches, conducting forensic analysis, and coordinating response efforts with relevant stakeholders. Monitoring and Analysis: Monitor DLP alerts and events to identify potential security incidents, policy violations, and data leakage incidents. Analyze DLP logs and reports to assess the effectiveness of DLP controls and identify areas for improvement. Remediation Guidance: Provide guidance and recommendations to IT and business units on remediation actions in response to DLP incidents, including implementing corrective controls, updating security policies, and conducting user awareness training. Integration and Automation: Integrate DLP solutions with other security technologies, such as SIEM (Security Information and Event Management) systems, identity and access management (IAM) solutions, and endpoint security controls. Implement automation workflows to streamline DLP operations and improve incident response capabilities. Training and Awareness: Develop and deliver training programs and awareness campaigns to educate employees about DLP policies, best practices, and the importance of protecting sensitive data. Promote a culture of data security and compliance throughout the organization. Compliance and Audit Support: Ensure that DLP controls and processes comply with regulatory requirements, industry standards, and contractual obligations. Support compliance audits and assessments by providing evidence of DLP implementation, effectiveness, and adherence to policies. Vendor Management: Evaluate DLP vendors and technologies, assess new features and capabilities, and make recommendations for technology upgrades or enhancements to meet evolving security requirements and business needs. Experience in Tools-Netscope DLP,SailPoint FAM?,ServiceNow/Hive? Additional Information: - The candidate should have a minimum of 3 years of experience in Data Loss Prevention (DLP). - The ideal candidate will possess a strong educational background in computer science, information technology, or a related field, along with a proven track record of delivering impactful security solutions. - This position is based at our Gurugram office.