Job Description

Cyber Security Architect (with TPRM Experience)
7–10 years of experience in cyber security architecture, cloud security, and TPRM.
Strong understanding of SIEM/UEBA (Securonix), EDR (CrowdStrike), Zscaler, and Datadog.
Hands‑on experience in TPRM frameworks, vendor assessments, risk scoring, and SMTD preparation.
Experience drafting SOPs, playbooks, architecture diagrams, and IR documentation.
Familiarity with compliance standards: ISO, SOC2, HIPAA etc
Certifications (Preferred)
ISO 27001 Lead Auditor/Implementer
CISA / CRISC
CISSP / CCSP
Cloud & vendor‑risk certifications

͏

This role is responsible for designing, reviewing, and enhancing the WME security architecture across SOC, cloud, endpoint, and third‑party ecosystems. The candidate must have strong experience in TPRM, vendor security assessments, and aligning the organization with global standards (ISO 27001, HIPAA, DPDP Act, NIST).
Key Responsibilities
1. Security Architecture & Design
Define and review security controls across cloud (AWS), endpoints, networks, and applications.
Lead integrations across the WME security ecosystem—Securonix, CrowdStrike, Zscaler, Mimecast, Armis, ZeroFox.
Perform architecture risk assessments and define secure configuration baselines.
2. Third‑Party Risk Management (TPRM)
Review and assess third‑party vendors as part of WME’s TPRM process.
Validate assessments performed by external partners and ensure alignment to WME requirements.
Conduct risk scoring, gap identification, remediation plans, and final risk acceptance summaries.
Prepare SMTD (Security Minimum Technical Requirements) and validate vendor responses.
3. Policy, Standards & Compliance
Develop and maintain WME security policies, SOPs, IRPs, cloud security guidelines.
Ensure alignment with:
ISO 27001
NIST CSF
HIPAA
Support internal and external audits.
4. SOC & IR Process Enhancement
Work with SOC Manager to strengthen detection rules, MITRE mappings, UEBA models.
Lead investigation of complex incidents and perform root-cause analysis.
5. Client & Stakeholder Collaboration
Work closely with WME leadership, legal, privacy, and engineering teams.
Present architecture review findings and risk summaries to stakeholders.

͏

͏

͏