Lead - Security Architecture

Service, Expertise, and Integrity. Together, they reflect the three cornerstones of business conduct which we strive to instill in our employees, whom we call partners, and to provide to our clients and the communities we serve worldwide. With more than 135 years of financial experience and over 24,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service. Security Architect role is accountable for driving security initiatives for the organization. Under limited supervisions, you will work with a wide variety of business stakeholders and IT professionals (including different Security functions, Enterprise Architecture, Technology Infrastructure, and Cloud Engineering teams) to ensure organizational security needs/controls are aligned to support business goals and objectives. Define security functional requirements and non-functional requirements to meet the business objectives of a solution Work with stakeholders in setting the technical direction, selection, and evaluating candidate security solutions Work with stakeholders to design and document the conceptual and detailed designs of security solutions Lead the development of security standards, reference architectures, patterns, and guidelines Assess effectiveness of security controls i.e. data protection, IAM, detective controls, infrastructure/network security, incident response. Work on identifying and driving implementation of appropriate controls, processes, and remediation of non-compliance Research and advocate new technologies, architectures, and security products that will support security maturity roadmap Act as a subject matter expert for advisory, review and approval of security designs, configurations, baselines, and technical standards Create and review threat models using various approaches such as off the shelf tools, whiteboarding etc. Good to have hands on Microsoft Threat Model and SD Element or any other open source threat modelling tools Interfaces frequently with information security industry groups to stay abreast of emerging security trends Helps establish overall enterprise information security architecture (EISA) by aligning business processes, IT software and hardware, local and wide area networks, people, operations, and projects with the organization’s overall security strategy Evaluates proposals to determine if proposed security solutions effectively address enterprise requirements, as detailed in solicitation documents Interprets and/or approves security requirements relative to the capabilities of new information technologies. Good understanding of AI and emerging technologies. Which includes GAI, Deep Learning, Guardrails, etc.. Work Experience / Knowledge: 10+ years’ IT experience with 6+ years focused on security and solution architecture 3+ years’ experience with cloud delivery platforms Iaa S/Paa S/Saa S and providers such as Amazon Web Services (AWS) and Microsoft Experience leading enterprise-wide security initiatives, including architecture and implementation of various security solutions & processes Ability to engage with senior leaders to define requirements and communicate effectively the results and risks Expert in 1 or more technology domains – infrastructure, application, network, IAM, data, endpoint Experience working with enterprise architecture practice and methodology, with security focus. Experience authoring security standards, reference architectures, patterns, and guidelines Knowledge of or experience with industry security controls frameworks such as NIST, CSA CCM, CIS Critical Security Controls. Hands-on experience in Cloud (Microsoft Azure/GCP/AWS ) security architecture, security engineering, or equivalent experience with vendor specific cloud certification. QUALIFICATIONS: BE/Btech degree and relevant work experience is required 8-10 years of experience in software development, information security and architecture design & controls Certified Information Systems Security Professional (CISSP) or equivalent Preferred - certified in an enterprise architecture methodology and framework like TOGAF or SABSA Cloud Security Professional (CCSP), Certified Cloud Security Knowledge (CCSK), or preferred vendor certifications from AWS, Microsoft Azure or Google Cloud Platform In-depth knowledge and understanding of OWASP Top 10 and CWE Top 25 with experience in assessment and providing remediation strategies Working with Us As a Northern Trust partner, you will be part of a flexible and collaborative work culture, which has a strong history of financial strength and stability. Movement within the organization is encouraged, senior leaders are accessible, and you can take pride in working for a company committed to an inclusive workplace and assisting the communities we serve. Philanthropy is deeply rooted in Northern Trust’s history and is an essential element of our culture. Employees around the world give their time and talent to work for the greater good of their communities. Reasonable Accommodation Northern Trust is committed to working with and providing adjustments to individuals with health conditions and disabilities. If you need a reasonable accommodation for any part of the employment process, please email our HR Service Center at My HRHelp@ntrs.com, or alternatively you can discuss your individual requirements with the recruiter you are working with. About Our Pune Office The Northern Trust Pune office, established in 2016, is now home to over 3,000 employees. The office handles various functions, including Operations for Asset Servicing and Wealth Management, as well as delivering critical technology solutions that support business operations across the globe. Our Pune team takes our commitment to service to heart. In 2024, they volunteered more than 10,000+ hours into the communities where they live and work. Learn more. Looking for greater? You found it. A global financial leader with more than 22,000 employees in 23 locations worldwide, Northern Trust empowers our employees to achieve more than just business goals. Our focus on work-life balance, career mobility and unique opportunities are just a few of the reasons we’ve been named one of the world’s most admired companies. Terms and Conditions Candidate Privacy Notice California Applicant Privacy Notice Pay Transparency Nondiscrimination Provision (U.S) Transparency in Coverage Disclosure – North America Northern Trust is committed to working with and providing reasonable accommodations to individuals with disabilities. If, because of a medical condition or disability, you need a reasonable accommodation for any part of the employment process, please email our HR Service Center or call 1-800-807-0302 (North America), +630-276-5353 (Asia Pacific), 1800-425-0333 (India), +44(0)207 982 4357 (Europe, Middle East and Africa) and let us know the nature of your request and your contact information. APAC/INDIA EEO STATEMENT It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non-discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development. Canada EEO STATEMENT Northern Trust is an Equal Opportunity Employer. Hiring and other employment decisions at Northern Trust are made without regard to race, colour, religion, sex, ancestry, national origin, ethnic origin, age, disability, citizenship, veteran status, sexual orientation, record of offences, marital status, family status, or any other characteristic protected by federal, provincial, or local law, regulation, or ordinance. EMEA EEO STATEMENT It is the policy and practice of Northern Trust to provide equal employment opportunities to all employees and applicants. Northern Trust does not discriminate on the basis of race, colour, religion or belief, nationality, ethnic or national origin, sex, marital status, sexual orientation, disability or age. All employment decisions will be made in a non-discriminatory manner in accordance with our obligations under the law and codes of practice. This includes human resources’ decisions relating to recruitment, terms and conditions of employment, transfers, promotions and access to learning and development. USA EEO STATEMENT It is the policy of The Northern Trust Company to afford equal opportunity in all phases of employment without regard to an individual's age, race, color, religion, creed, gender, national origin, citizenship status, marital status, pregnancy, sexual orientation, gender identity, gender expression, genetic tests and information, physical or mental disability, protected veteran status or any other legally protected status. EEO Know Your Rights (U.S.)