Description

Design and govern security architecture for cloud and enterprise systems, aligning technical controls with business and IT strategies. Serve as the primary subject matter expert for information security, providing advisory services to business, IT, and IS management teams.

Responsibilities

• Establish strategic security architecture standards and frameworks that support overall business objectives.
• Collaborate with Enterprise Architecture and Application Development to enhance security posture for new and existing systems.
• Design security architectures, evaluate organizational risks, and approve the implementation of systems into the production environment.
• Assess the information security program using NIST Cybersecurity Framework and FFIEC Cyber Assessment Tool to identify and remediate gaps.
• Ensure systems meet regulatory requirements (GLBA, SOX, HIPAA, FFIEC, PCI) through compensating controls and track compliance metrics.

Required Skills

• Bachelor's degree in Computer Science or related field.
• 8+ years of experience in Information Security, with a focus on software development, secure SDLC, or security architecture.
• Expert-level knowledge of security principles, solutions, tools, and methodologies.
• Thorough understanding of risks associated with virtualization and cloud-based computing.
• Ability to translate complex technical information across all organizational levels.
• Strong project management skills with the ability to manage and prioritize multiple tasks.
• Excellent written and verbal communication skills, including presenting to senior management.
• Ability to use independent judgment to make sound, justifiable decisions.

Preferred Skills

• Experience designing and implementing comprehensive security solutions.
• Proven ability to mentor team members and work effectively without daily direction.

Key Skills

Education

Bachelor's degree in Computer Science