Description

Design and govern security architecture for cloud and enterprise systems, aligning technical controls with business and IT strategies.

This role is on-site.

Responsibilities

• Establish strategic security architecture standards and frameworks that support overall business objectives.
• Collaborate with Enterprise Architecture and Application Development to enhance security posture for new and existing systems.
• Assess the information security program using NIST Cybersecurity Framework and FFIEC Cyber Assessment Tool to identify and remediate gaps.
• Ensure systems meet regulatory requirements (GLBA, SOX, HIPAA, FFIEC, PCI) through compensating controls and track compliance metrics.
• Serve as the primary subject matter expert for information security, providing advisory services to business and IT management teams.

Required Skills

• 8+ years of experience in Information Security, with a focus on software development, secure SDLC, or security architecture.
• Expert-level knowledge of security principles, solutions, tools, and methodologies.
• Thorough understanding of risks associated with virtualization and cloud-based computing.
• Ability to translate complex technical information across all organizational levels.
• Strong project management skills with the ability to manage and prioritize multiple tasks.
• Excellent written and verbal communication skills, including presenting to senior management.
• Ability to use independent judgment to make sound, justifiable decisions.

Preferred Skills

• Experience designing and implementing comprehensive security solutions.
• Proven ability to mentor team members and work effectively without daily direction.

Key Skills

Education

Bachelor's degree in Computer Science