Corporate Security Architect

Job Title: Corporate Security Architect

Location: Remote / India
Experience: 8+ Years
Employment Type: Full-Time

Notice Period: Immediate Joiners or Up to 15 Days

Role Summary

We are seeking an experienced Corporate Security Architect to lead security assessments for third-party vendors and enterprise technologies. This role is responsible for strengthening the organization's security posture by conducting Third-Party Risk Assessments (TPRA), evaluating SaaS applications, cloud services, and enterprise platforms, and providing risk-based recommendations to support secure business operations.

The ideal candidate will collaborate with Procurement, Legal, IT, Privacy, Compliance, and business teams to assess security risks, review vendor security controls, and ensure compliance with organizational security standards and governance frameworks.

Key Responsibilities

Third-Party Risk Assessments (TPRA)

• Conduct comprehensive security assessments of third-party vendors, suppliers, and service providers.
• Review vendor security documentation, including SOC 2 reports, ISO 27001 certifications, penetration testing reports, security questionnaires, and architecture documents.
• Evaluate security controls related to identity and access management, data protection, infrastructure security, business continuity, and incident response.
• Document assessment findings, risk ratings, remediation recommendations, and approval decisions.

Corporate Technology Security Reviews

• Perform security assessments of SaaS applications, enterprise platforms, cloud services, and corporate technologies.
• Evaluate authentication, authorization, encryption, integrations, logging, monitoring, and overall security posture.
• Assess emerging technologies, including AI-enabled solutions, for security risks and compliance.
• Provide risk-based recommendations to support secure technology adoption.

Assessment Operations & Stakeholder Management

• Execute security assessments in accordance with established policies, standards, and governance processes.
• Maintain complete assessment documentation, supporting evidence, findings, and recommendations.
• Track remediation activities and monitor assessment progress through completion.
• Partner with Procurement, Legal, IT, Privacy, Compliance, and business stakeholders throughout the assessment lifecycle.
• Escalate critical security risks through appropriate governance channels.

Reporting & Operational Metrics

• Prepare reports covering assessment volumes, turnaround time, risk trends, remediation status, and overall program performance.
• Develop stakeholder-ready summaries and support internal and external audit requirements.
• Contribute to continuous improvement initiatives by identifying opportunities for process optimization and assessment automation.

Key Deliverables

• Completed Third-Party Risk Assessment (TPRA) reports.
• Security assessment reports for SaaS applications, cloud services, and enterprise technologies.
• Risk findings with severity ratings and remediation recommendations.
• Assessment documentation, supporting evidence, and approval recommendations.
• Remediation tracking and validation reports.
• Monthly operational dashboards and assessment metrics.
• Executive-ready reports and stakeholder presentations.
• Recommendations for improving assessment processes and program scalability.

Required Skills & Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related discipline.
• 8+ years of experience in Information Security, Security Architecture, Risk Management, or Corporate Security.
• Hands-on experience managing or supporting Third-Party Risk Management (TPRM/TPRA) programs.
• Experience conducting security assessments for SaaS platforms, cloud services, and enterprise applications.
• Strong knowledge of security frameworks and standards, including NIST CSF, ISO 27001, SOC 2, CIS Controls, cloud security, and Identity & Access Management (IAM).
• Experience reviewing vendor security documentation and performing risk-based security assessments.
• Excellent analytical, documentation, communication, and stakeholder management skills.

Preferred Qualifications

• Experience supporting enterprise SaaS environments and cloud-based technologies.
• Hands-on experience with Governance, Risk & Compliance (GRC) platforms and vendor risk management tools.
• Experience developing security dashboards, metrics, and operational reporting.
• Professional certifications such as CISSP, CISM, CRISC, CCSP, or CISA are preferred.
• Experience evaluating AI-enabled technologies and defining security requirements for AI adoption.

Originally posted on Himalayas