Security Architect

About Company:

BDO is a global network of professional services firms with a presence in over 166 countries, revenue of over USD 14 billion, and experience of over 60 years. Its a leading service provider for the mid-markets with client service at its heart.

BDO India Services Private Limited (or BDO India) is the India member firm of BDO International. BDO India offers strategic, operational, accounting and tax, and regulatory advisory & assistance for both domestic and international organizations across a range of industries. BDO India is led by more than 300+ Partners & Directors with a team of over 10,000 professionals operating across 14 cities and 20 offices. We expect to grow sizably in the coming 3-5 years, adding various dimensions to our business and multiplying and increasing the current team size multi-fold.

Key accountabilities:

Security Architecture & Design Authority

• Act as the design authority for security architecture across GCN and GHS platforms.
• Define and maintain security reference architectures, patterns and standards, aligned to BDO Globals Cyber Security Reference Architecture and Microsoft best practices.
• Review and approve solution designs, ensuring consistent application of Zero Trust, least privilege, defenceindepth and resilience principles.
• Provide architectural assurance for new initiatives, major changes and technology onboarding.

Microsoft Security Platform Architecture

• Design and govern security architecture across:

• Azure (identity, networking, landing zones, PaaS/IaaS security)

• Microsoft 365 (identity, collaboration, data protection, compliance)

• Microsoft Defender (Endpoint, Identity,Cloud Apps, Office 365)

• Microsoft Sentinel (SIEM/SOAR architecture, data onboarding, detection strategy)

• Microsoft Lighthouse (multitenant visibility and governance)

• Intune (endpoint, mobile device and application management)

• Ensure Microsoft Secure Score and Defender/Sentinel maturity improvements are architecturally driven and measurable.

Governance, Risk & Compliance Alignment

• Ensure security architectures align with ISO27001, NIST CSF 2.0, SOC 2, GDPR and internal ISMS controls.
• Translate regulatory and audit requirements into technical security controls and design patterns.
• Support internal and external audits by providing architectural artefacts, rationale and traceability.
• Contribute to risk assessments, threat modelling and designtime control validation.

ThreatLed & SecurebyDesign Practices

• Embed threat modelling, abusecase analysis and exposureaware design into solution architecture.
• Ensure architectural alignment with vulnerability management, CTEM and threat intelligence outputs.
• Promote secure development and platform engineering practices across global teams.

Stakeholder Engagement & Advisory

• Act as a trusted security advisor to Global IT, platform owners, engineering teams and member firms.
• Support both GCN and GHS stakeholders with pragmatic, riskbased architectural guidance.
• Collaborate closely with Security Operations, GRC, Identity, Infrastructure, Cloud and Service Delivery teams.

Continuous Improvement & Innovation

• Monitor emerging security technologies,Microsoft roadmap changes and industry trends.
• Identify opportunities to simplify,standardise and automate security architecture controls.
• Contribute to maturity roadmaps, KPIs and continuous improvement initiatives.

Qualifications and Experience

• Bachelors degree in Cyber Security, Information Technology, Computer Science or equivalent experience.
• 7+ years experience in information security, with significant experience in security architecture roles.
• Demonstrated experience designing security architectures in cloudfirst, Microsoftcentric environments.
• Strong background in enterprise identity, cloud security, endpoint security and SIEM/SOAR architectures.
• Experience operating in complex, global or multitenant environments.
• Security certifications are highly regarded (e.g. CISSP, CISM, CCSP, SABSA, AZ305 (Azure Solutions Architect Expert), AZ500 (Azure Security Engineer Associate), MS102 (Microsoft 365 Administrator Expert))