Security Architect – (Cloud & Enterprise Governance)

Location - PAN LTM.

Experience 8 to 12 Years.

We are seeking a Security Architect with strong cloud security and enterprise risk experience to support architecture reviews and governance engagement across complex cloud-first and hybrid environments.

This is not an implementation or DevSecOps role. The position requires senior-level architectural judgment, ability to define secure design expectations, and represent security in governance forums.

Core Responsibilities

• Lead and conduct security architecture assessments across cloud, hybrid, and legacy environments.
• Define and communicate secure design standards aligned to enterprise risk appetite.
• Review proposed architectures and identify unsafe or high-risk design patterns.
• Recommend secure architectural alternatives consistent with established enterprise guardrails.
• Apply and evaluate least privilege and least functionality principles in identity and access models.
• Conduct structured risk assessments and clearly articulate acceptable vs unacceptable risk.
• Represent Security Architecture in governance and review forums.
• Evaluate multi-tier and cloud-hosted architectures to ensure appropriate segmentation, logging sufficiency, and layered controls.
• Maintain alignment with recognized industry standards (e.g., NIST CSF, ISO 27000 series).

Required Experience

• 8+ years of enterprise information security experience.
• Demonstrated experience in security architecture reviews, not only implementation.
• Strong cloud security knowledge (AWS and/or Azure).
• Experience defining and enforcing security guardrails in enterprise environments.
• Experience participating in architecture or governance review boards.
• AI Security and Risk experience including generative AI and LLM risk assessments a plus
• Strong written and verbal communication skills.

Required Certifications (at least one)

• CISSP (strongly preferred)
• CCSP (preferred)
• CISM
• AWS Security Specialty / Azure Security Engineer
• Equivalent senior-level cloud security certification