Description

You will lead the development of information security architecture, focusing on application security and enterprise risk management.

Responsibilities

• Define information security strategies and guiding principles to align with business goals.
• Develop and implement security policies and standards aligned with industry best practices and federal regulations.
• Collaborate with IT teams, vendors, and state agencies to integrate security measures into technology solutions.
• Provide technical guidance on application security and participate in solutioning sessions to produce secure architectures.
• Identify and mitigate risks through security reviews, control testing, and cloud-based security design.

Required Skills

• 5+ years of experience in security architecture or related roles.
• Expertise in application security and Defense in Depth principles.
• Proficiency in NIST frameworks, specifically NIST 800-53(r5).
• Experience assessing System Security Plans and third-party audit documents such as SOC2 reports.
• Ability to conduct product research and perform information security assessments.
• Skill in documenting security architecture procedures and diagrams.
• Knowledge of NIST, CIS, HIPAA, FISMA standards.

Preferred Skills

• Professional certifications such as CISSP, CISM, or CISA.

Key Skills

Education

Any Gradute