Position Title:  Information Security Architect 2

Summary:

This role is responsible for direction on information security configurations security architecture (cloud-based, on-premises), and independently advises the organization on industry-leading security and compliance practices. This role will develop and maintain an overall security architecture strategy, maintain key standards and requirements, and develop a roadmap necessary to achieve our business objectives, with input from and collaboration with other IT and Security architects in key technology domains, including Cloud (public, on-prem, hybrid), network security, data security, identity/access management, endpoint, and mobile.

Essential Functions:

• Define, develop, and lead engagement models and frameworks for technical, process, resource, and operational security considerations for solutions at all points of the solution development lifecycle.
• Advise and consult on technical security topics, including providing design criteria, reviews, and approvals for application and system architectures, processes and workflows, database, network, and platform designs.
• Create and maintain implementation standards, reference architectures, design patterns, and threat models that support information security objectives.
• Contribute to the effectiveness and operations of the Architecture Review Board or equivalent.
• Collaborate and liaise with technology leaders to understand current and future technology roadmaps (e.g., digital transformation initiatives).
• Drive secure configuration of the company’s technologies, implementations, and software.
• Define and calibrate the security solutions and technologies necessary to monitor, prevent, and detect vulnerabilities, and internal and external attacks.
• Building on past experiences, design and maintain efficient architecture processes that incorporate into enterprise releases and change management processes.
• Other duties as assigned.

Qualifications:

• Bachelor’s degree in computer science, management/computer information systems or related field. May consider equivalent work experience and/or security certifications in lieu of degree.
• 10+ years relevant cyber security experience in a private or public institution.
• Experience implementing security programs incorporating regulatory requirements.
• Familiarity with Information Technology Governance and Architecture standards.
• Significant experience with leading security products and services in key domains.
• Experience in developing and implementing security solution architecture and design diagrams, documentation, and supporting materials.
• Travel: Up to 10%