Security Architect - N H A

About NHA: National Health Authority (NHA) is the apex body responsible for implementing Indias flagship public health insurance/assurance scheme called Ayushman Bharat Pradhan Mantri Jan Arogya Yojana & has been entrusted with the role of designing strategy, building technological infrastructure and implementation of National Digital Health Mission to create a National Digital Health Eco-system. National Health Authority is the successor of the National Health Agency, which was functioning as a registered society since 23rd May, 2018.NHA is governed by a Governing Board chaired by the Union Minister for Health and Family Welfare.

Position: Security Architect

Divisions: AB- PMJAY

About the role:

NHA is seeking a seasoned Security Architect professional to lead the security & compliance at NHA. Candidate should have Network, Infrastructure security design and compliance experience. The candidate should have a deep understanding of security architecture and will be responsible for designing, developing, and maintaining NHA security infrastructure. The role requires a combination of technical expertise, strategic thinking, and strong communication skills to collaborate effectively with cross-functional teams and provide guidance and leadership

Roles & Responsibilities:

• Ensures NHA systems and processes adhere to industry standards and regulatory requirements and staying ahead of emerging threats and vulnerabilities.
• Design, build and implement enterprise-class security systems for a production environment & non prod environment.
• Design and deploy security solutions, including firewalls, intrusion detection/prevention systems, antivirus software, encryption technologies, and access controls.
• Conduct regular security assessments and audits to identify vulnerabilities, risks, and compliance gaps.
• Develop and maintain security policies, standards, and procedures in alignment with industry best practices and regulatory requirements.
• Align standards, frameworks and security with overall business and technology strategy.

• Collaborate with IT teams to integrate security controls into infrastructure and application development lifecycles.
• Provide guidance and support to IT operations and development teams on security-related matters, including incident response and remediation.
• Lead compliance efforts by interpreting regulatory requirements and implementing controls to ensure ongoing compliance.
• Coordinate with external auditors and regulatory agencies during compliance audits and assessments.
• Conduct security awareness training and education programs for employees to promote a culture of security awareness and compliance.
• Identify and communicate current and emerging security threats.
• Create solutions that balance business requirements with information and cyber security requirements.

Required Candidate Profile:

Essential Qualifications: B.E/B.TECH OR MCA from a reputed college/University.

Certificate Mandatory: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent certification.

Technical Experience & Competencies:

• Overall, minimum 18 years of total IT experience post qualification completion.
• Proficiency in Network Security and Infrastructure Security Design, experience in leading security and compliance team.
• Deep knowledge & understanding of Infrastructure Security and Application Security in terms of OWASP Top 10 Security Standard.
• Familiarity with CERT-In guidelines and Security Audit experience.
• Experience in designing security architecture that is compliant with the Government of India.
• Experience in doing compliance audits
• Strong communication and interpersonal skills, with the ability to communicate technical concepts to non-technical stakeholders.
• Excellent analytical and problem-solving skills with the ability to assess complex security issues and recommend effective solutions in a fast-paced environment.