Sr Security Architect II (Email & Cloud Security) (Bangalore, Karnataka, IN)
About this opportunity
Job Title: Senior Security Architect II (Email & Cloud Security)
Department: Cyber Defence Center (CDC), STO-XDR
Location: Bengaluru, India
Your impact begins here
As Senior Security Architect II (Email & Cloud Security), you will own the architecture that protects how Novo communicates and works in the cloud. You will set the vision, standards and roadmap for email and cloud security, turning business and security needs into designs that are secure, scalable and sustainable. Your work helps the Cyber Defence Center detect threats earlier and respond faster, so colleagues across Novo can keep making progress for people living with serious chronic diseases.
What you’ll bring
You combine deep technical expertise with the judgement to balance strong security with what the business needs.
A degree in Computer Science, Software Engineering, Business Administration or a related field (BE, MSc, MBA or similar).
12+ years of IT experience, including security consulting, project management and service management roles.
Strong hands-on expertise in email security, including mail flow, message headers, SMTP and email authentication standards such as SPF, DKIM, DMARC and MTA-STS.
Experience architecting and optimising platforms such as Mimecast, Microsoft Defender for Office 365, Exchange Online Protection and Microsoft Defender XDR.
Solid knowledge of cloud security, including CSPM/CNAPP and cloud workload protection with tools such as Wiz and Prisma Cloud.
Experience investigating email-based threats such as phishing, Business Email Compromise, spoofing and malware, using header analysis, message tracing and IoCs.
5–8 years of experience working with GxP requirements, validation and compliance, and in-depth knowledge of ITIL incident, problem and change management.
A structured, self-driven way of working, with strong communication skills and comfort collaborating across cultures and time zones.
Useful, but not essential:
Experience with cloud migrations.
Knowledge of Lean, Six Sigma or Agile frameworks.
Experience configuring ServiceNow ITSM and ITOM processes.
What you’ll do
You will be the architectural single point of contact for email and cloud security, setting direction and making decisions within your governance area. You will:
Define and evolve the strategic vision, architecture and roadmap for cloud, SaaS and email security, in line with Novo’s enterprise security strategy.
Set architecture principles, standards, reference architectures and guardrails, and lead design reviews, gap analyses and proofs of concept.
Lead the architecture, policies and integrations for Mimecast, Microsoft Defender for Office 365, Defender XDR, Valimail, Wiz and Prisma Cloud.
Shape architecture and controls that strengthen monitoring, detection, threat hunting, incident response and automation, and guide investigations into complex email threats.
Promote a security-by-design approach: when exceptions are requested, find secure, supportable alternatives rather than broad whitelisting or control bypasses.
Own service strategy, risk management, KPIs and SLA performance, and work with vendors on deliverables, quotations, licences and contracts alongside the service owner.
Who you’ll work with
You will join STO-XDR within the Cyber Defence Center, Novo’s dedicated cyber defence organisation. The CDC protects the company from cyber threats, detects incidents, responds quickly and hardens technologies, processes and systems so the business can operate safely. STO-XDR runs and sustains the security technology stack: managing day-to-day platform operations, upgrades and vendor relationships, ensuring logs and telemetry flow into the CDC ecosystem, and keeping platforms audit-ready and supported to agreed SLAs.
Your closest partners will be CDC colleagues in India and Denmark, CDC management, the CISO organisation, Information Security, Enterprise Architecture, Digital Workplace, Cloud Platform, Security Operations, Enterprise IT, and IT service, system and quality managers across the business. Externally, you will work with strategic suppliers including Mimecast, Microsoft, Wiz, Valimail and cloud workload protection vendors.
You will bring different perspectives together, influence stakeholders with differing interests and speak up when decisions stall, so security is built in from the start.
What you can expect here
You will be trusted to work independently, own architectural decisions and set direction with significant impact across a wide, international and cross-functional area. Your expertise will be heard in technical forums and architecture discussions, and you will have room to evaluate emerging technologies and keep improving how Novo protects its email and cloud landscape.
You will grow through global collaboration, close work with leading security vendors and the chance to mentor colleagues in your field. The work moves at pace, with clear expectations and a team that values curiosity, honest feedback and quality.
Start now
Your impact begins today. If you are ready to shape the architecture that keeps Novo secure, apply for the Senior Security Architect II (Email & Cloud Security) role by 27 Oct 2026. Applications are reviewed on an ongoing basis, so we encourage you to apply as soon as possible.
We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.
]]>
Job details
How this role compares
Computed from every other active Information Technology role in our database, not just this employer's listings.
We currently track 599 comparable Senior Information Technology roles across 60 biopharma companies.
Salary context
103 of 599 peers report a salary range (USD, annualized)
Peers share this role's job function and a matching or adjacent seniority level -- not necessarily the same therapeutic area or country.
Where these roles are based
Top locations among the 599 comparable roles
+ 27 more countries
Seniority mix
599 of 599 peers have a known seniority level
Therapeutic area mix
4 of 599 peers have a known therapeutic area; the rest are genuinely unlabeled, not hidden
Similar opportunities
The closest matches from our peer group, ranked by how similar they are, not how well you'd qualify for them -- treat this as market context, not a guaranteed shortlist; a weak match is labeled as one below.
Notify me about similar jobs
Get an email when we spot other openings like this one – same job function, comparable seniority, roles you'd actually want to see.
Or follow a whole field: get every new Information Technology job in India, and choose locations and companies.
How we calculate "similar"
No black box, no LLM guesswork: a deterministic score built from four normalized attributes. Here's this role's own peer group at different match levels, so you can see the mechanism, not just the result.
Every comparison starts from the same 100-point budget: 25 for working in the same function, 40 for the same therapeutic area, 20 for the same or adjacent seniority, 15 for the same country. A dimension we can't confirm on both sides contributes nothing, never a guess, never a free pass.
0 points, never a partial guess. A role we know almost nothing about beyond its function bottoms out at 25%; it never inflates to 100% just because there's little to compare against. Seniority uses a defined ladder (Associate → Manager → Associate Director → Senior → Principal → Director → Senior Director → Executive/VP) so "Director" and "Senior Director" count as adjacent, but "Director" and "Executive/VP" do not.