Information Security Architect

The Information Security Lead Architect is responsible for leading the design and implementation of comprehensive security architecture solutions. The role provides expertise in security frameworks, technologies, and best practices to assess security risks, define security requirements, and develop strategies to mitigate vulnerabilities. The role will involve designing secure network architectures, implementing access controls, and establishing encryption mechanisms. Additionally, the role plays a crucial part in conducting risk assessments, identifying gaps in security controls, and developing remediation plans. As a leader in the field, the role provides guidance, mentorship, and direction to the security team, fostering a culture of continuous improvement and ensuring compliance with industry regulations and standards. The role serves as a technical subject matter expert on moderate to high complexity initiatives, directly engaging in the selection, design, implementation and troubleshooting of security solutions.

#LI-DNI

• Develops and contributes to the implementation of the information security architecture strategy and roadmap, aligning it with business objectives, regulatory requirements, and industry best practices
• Provides guidance to the security team, overseeing the design and integration of security solutions
• Works with business units, IT teams, executive leadership, and vendors to communicate security risks and strategies
• Recommends and implements new security technologies and tools
• Defines and enforces security standards and frameworks
• Collaborates with enterprise architects to integrate security controls into IT architecture
• Develops and promotes security architecture processes and templates
• Conduct security architecture reviews and risk assessments, identifying potential vulnerabilities, weaknesses, and gaps in existing systems and proposing effective solutions to mitigate risks
• Serves as a mentor to junior security architects and team members
• Participates in security forums and conferences
• Provides technical leadership and guidance to the information security team and other stakeholders, overseeing the design, implementation, and integration of security solutions across the organization
• Ensures collaboration of business units, IT teams, and vendors to assess security requirements, evaluate solution options, and architect secure systems and applications that meet business needs while maintaining a strong security posture
• Defines and enforces information security standards, frameworks, and reference architectures, ensuring consistent and standardized security practices across all technology domains and projects
• Oversees the conduct of security architecture reviews and risk assessments, identifying potential vulnerabilities, weaknesses, and gaps in existing systems and proposing effective solutions to mitigate risks
• Oversees the design and implementation of security controls, such as firewalls, intrusion detection/prevention systems, encryption mechanisms, and secure network architectures, to protect the organization's assets and data
• Collaborates with enterprise architects and IT stakeholders to integrate security controls and requirements into overall IT architecture frameworks, ensuring the security-by-design principle is followed throughout the development and implementation lifecycle
• Provides subject matter expertise in security technologies and solutions, evaluating emerging security trends and products, and making recommendations for the adoption of new technologies to enhance the organization's security posture
• Participate in security incident response and investigation activities, coordinating with internal teams and external entities to effectively respond to and mitigate security incidents, and providing guidance on post-incident remediation actions

• 6-10 years of experience in Information Security or related field.
• Bachelor's degree in Computer Science, Information Technology or a related field and/or commensurate experience. Master's degree in related field is preferred.

Licenses and Certifications:

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Azure Solutions Architect (Preferred), AWS Certified Solutions Architect
• TOGAF
• Other relevant certifications

Behavioral Competencies:

• Strategic Mindset
• Interpersonal Savvy
• Effective Communications
• Nimble Learning
• Tech Savvy
• Manages Ambiguity
• Manages Complexity
• Manages Conflict
• Drives for results
• Action Oriented