Job Description

Job Title: Senior Security Architect II (Email & Cloud Security)

Department: Cyber Defence Center (CDC), STO-XDR

Location: Bengaluru, India

Your impact begins here

As Senior Security Architect II (Email & Cloud Security), you will own the architecture that protects how Novo communicates and works in the cloud. You will set the vision, standards and roadmap for email and cloud security, turning business and security needs into designs that are secure, scalable and sustainable. Your work helps the Cyber Defence Center detect threats earlier and respond faster, so colleagues across Novo can keep making progress for people living with serious chronic diseases.

What you’ll bring

You combine deep technical expertise with the judgement to balance strong security with what the business needs.

• A degree in Computer Science, Software Engineering, Business Administration or a related field (BE, MSc, MBA or similar).
• 12+ years of IT experience, including security consulting, project management and service management roles.
• Strong hands-on expertise in email security, including mail flow, message headers, SMTP and email authentication standards such as SPF, DKIM, DMARC and MTA-STS.
• Experience architecting and optimising platforms such as Mimecast, Microsoft Defender for Office 365, Exchange Online Protection and Microsoft Defender XDR.
• Solid knowledge of cloud security, including CSPM/CNAPP and cloud workload protection with tools such as Wiz and Prisma Cloud.
• Experience investigating email-based threats such as phishing, Business Email Compromise, spoofing and malware, using header analysis, message tracing and IoCs.
• 5–8 years of experience working with GxP requirements, validation and compliance, and in-depth knowledge of ITIL incident, problem and change management.
• A structured, self-driven way of working, with strong communication skills and comfort collaborating across cultures and time zones.

Useful, but not essential:

• Experience with cloud migrations.
• Knowledge of Lean, Six Sigma or Agile frameworks.
• Experience configuring ServiceNow ITSM and ITOM processes.

What you’ll do

• You will be the architectural single point of contact for email and cloud security, setting direction and making decisions within your governance area. You will:
• Define and evolve the strategic vision, architecture and roadmap for cloud, SaaS and email security, in line with Novo’s enterprise security strategy.
• Set architecture principles, standards, reference architectures and guardrails, and lead design reviews, gap analyses and proofs of concept.
• Lead the architecture, policies and integrations for Mimecast, Microsoft Defender for Office 365, Defender XDR, Valimail, Wiz and Prisma Cloud.
• Shape architecture and controls that strengthen monitoring, detection, threat hunting, incident response and automation, and guide investigations into complex email threats.
• Promote a security-by-design approach: when exceptions are requested, find secure, supportable alternatives rather than broad whitelisting or control bypasses.
• Own service strategy, risk management, KPIs and SLA performance, and work with vendors on deliverables, quotations, licences and contracts alongside the service owner.

Who you’ll work with

• You will join STO-XDR within the Cyber Defence Center, Novo’s dedicated cyber defence organisation. The CDC protects the company from cyber threats, detects incidents, responds quickly and hardens technologies, processes and systems so the business can operate safely. STO-XDR runs and sustains the security technology stack: managing day-to-day platform operations, upgrades and vendor relationships, ensuring logs and telemetry flow into the CDC ecosystem, and keeping platforms audit-ready and supported to agreed SLAs.
• Your closest partners will be CDC colleagues in India and Denmark, CDC management, the CISO organisation, Information Security, Enterprise Architecture, Digital Workplace, Cloud Platform, Security Operations, Enterprise IT, and IT service, system and quality managers across the business. Externally, you will work with strategic suppliers including Mimecast, Microsoft, Wiz, Valimail and cloud workload protection vendors.
• You will bring different perspectives together, influence stakeholders with differing interests and speak up when decisions stall, so security is built in from the start.

What you can expect here

• You will be trusted to work independently, own architectural decisions and set direction with significant impact across a wide, international and cross-functional area. Your expertise will be heard in technical forums and architecture discussions, and you will have room to evaluate emerging technologies and keep improving how Novo protects its email and cloud landscape.
• You will grow through global collaboration, close work with leading security vendors and the chance to mentor colleagues in your field. The work moves at pace, with clear expectations and a team that values curiosity, honest feedback and quality.

Start now

Your impact begins today. If you are ready to shape the architecture that keeps Novo secure, apply for the Senior Security Architect II (Email & Cloud Security) role by 27 Oct 2026. Applications are reviewed on an ongoing basis, so we encourage you to apply as soon as possible.

We commit to an inclusive recruitment process and equality of opportunity for all our job applicants.