Information Security Engineer

Job Description – Security Architecture Analyst (ISG) Position Security Architecture Analyst - Information Security Group (ISG)

Experience: 2 to 4 Years Location: Bangalore About Information Security Group (ISG) The Information Security Group (ISG) under the CISO's Office is responsible for ensuring Security and Privacy across all internal and client-facing business operations. ISG focuses on strengthening the organization's security posture through governance, risk management, compliance, security architecture, and cybersecurity operations.

The team works collaboratively with stakeholders across the organization to provide assurance that confidential information is handled securely while meeting business objectives.

ISG comprises two key functions

• Cyber Security Governance, Risk & Compliance (GRC)

• Cyber Security Technical Operations (TechOps)

Role Overview We are looking for a highly motivated Security Architecture Analyst to join the Security Architecture (SecArch) team within TechOps. The role involves supporting security architecture initiatives, developing and maintaining security standards, assessing technical security controls, and contributing to the organization's overall cybersecurity maturity.

The ideal candidate should have hands-on exposure to cybersecurity technologies, cloud security concepts, and enterprise security architecture principles. Key Responsibilities

• Assist in developing, maintaining, and updating technical security standards, including hardening, encryption, and security baseline standards.

• Support the creation and maintenance of security architecture frameworks, guidelines, and artifacts.

• Review IT, cloud, and infrastructure changes to ensure alignment with security architecture requirements.

• Track, manage, and review security exceptions, ensuring appropriate governance and timely closure.

• Conduct technical security assessments and due diligence for third-party vendors, products, and services.

• Participate in identifying security gaps and recommending mitigation measures across the organization.

• Support security engineering initiatives and implementation of cybersecurity technologies.

• Collaborate with vendors throughout solution evaluation, PoCs, implementation, upgrades, and operational support.

• Assist in monitoring emerging cyber threats and recommend security improvements where necessary.

• Work closely with infrastructure, cloud, network, and application teams to strengthen the organization's cybersecurity posture.

• Contribute to security reporting, control effectiveness reviews, and continuous improvement initiatives.

• Support cybersecurity budget planning, tracking, and reporting activities.

Required Skills & Knowledge

• 2 to 4 years of experience in Information Security, Cyber Security, Security Architecture, or Security Engineering.

• Good understanding of cybersecurity technologies such as:

• EDR/XDR

• SIEM & SOAR

• CASB & SASE

• WAF & Firewalls

• PAM/PIM

• UEBA

• Threat Hunting

• Anti-DDoS & ASM Solutions

• Basic understanding of Enterprise Security Architecture and Cyber Resilience concepts.

• Familiarity with Cloud Security fundamentals across Azure, AWS, or GCP.

• Knowledge of securing networks, servers, cloud environments, virtualization platforms, applications, and endpoint systems.

• Understanding of security risk management and technical control implementation.

• Awareness of current cyber threat trends and security best practices.

Preferred Knowledge Exposure to one or more of the following frameworks and standards:

• ISO 27001

• NIST Cyber Security Framework (CSF)

• NIST 800-53

• PCI DSS

• SOC 1 / SOC 2

• HIPAA

• SOX Controls

• ISO 22301

Education & Certifications Education:

• Bachelor's degree in Engineering, Computer Science, Information Technology, Cyber Security, or equivalent.

Preferred Certifications (Any One)

• CISSP

• CISM

• CCSP

• ISO 27001 Lead Implementer / Lead Auditor

• Microsoft Azure Security Certifications

• AWS Security Certifications

• Google Cloud Security Certifications

Key Competencies

• Strong analytical and problem-solving skills.

• Excellent communication and stakeholder management abilities.

• Attention to detail and strong documentation skills.

• Ability to work independently and collaboratively in a fast-paced environment.

• Continuous learner with a passion for cybersecurity.

• Self-driven, proactive, and innovative mindset.