Principal Information Security Architect - DTJ (REMOTE)

At Charles River, we are passionate about improving the quality of people’s lives. When you join our global family, you will help create healthier lives for millions of patients and their families. 

Charles River employees are innovative thinkers, who are dedicated to continuous learning and improvement. We will empower you with the resources you need to grow and develop in your career. 

As a Charles River employee, you will be part of an industry-leading, customer-focused company at the forefront of drug development. Your skills will play a key role in bringing life-saving therapies to market faster through simpler, quicker, and more digitalized processes. Whether you are in lab operations, finance, IT, sales, or another area, when you work at Charles River, you will be the difference every day for patients across the globe.

Job Summary

The Principal InfoSec Architect, a senior position with advanced skills, reports directly to the Head Information Security Architect and frequently collaborates with the CISO, team leads, Global Technology Architects, Business Leads, and the audit and compliance teams. This role is pivotal in designing security architectures that not only safeguard the organization but also support its operational and innovative endeavors. The Principal InfoSec Architect engages with a variety of teams including security engineering, IT infrastructure, application development, and security operations.

Key responsibilities include developing security strategies for business-to-business engagements, third-party relationships, outsourced solutions, and vendor management. With significant experience in AWS and Azure environments, the architect ensures that cloud security architectures are robust, compliant, and optimized for performance. The architect is tasked with providing expert guidance on current security challenges while anticipating future industry shifts to proactively develop secure solutions. This role demands a strategic thinker capable of understanding potential adversarial tactics and evolving threats. The Principal InfoSec Architect is also essential in leading and mentoring teams, requiring strong communication, organizational skills, and the ability to influence across technical and non-technical groups.

ESSENTIAL DUTIES AND REPONSIBILITIES
•    Design and implement robust cloud security architectures for both Azure and AWS platforms, ensuring they meet industry standards and compliance requirements.
•    Lead the development of cloud security strategies and frameworks that align with organizational goals and risk tolerance, focusing on scalable and sustainable security solutions.
•    Conduct thorough assessments and audits of existing cloud infrastructure, identify security vulnerabilities, and prioritize remediation strategies based on risk.
•    Develop and enforce cloud security policies and procedures that govern access, data security, network configurations, and the integration of third-party services.
•    Oversee the integration of advanced security tools and technologies such as firewalls, intrusion detection systems, and encryption in Azure and AWS environments.
•    Collaborate with IT and development teams to embed security practices in the DevOps pipeline, promoting a culture of security awareness and proactive risk management.
•    Provide expert guidance on cloud security best practices, risk management, and incident response strategies to technical and executive teams.
•    Stay abreast of emerging security threats and trends in cloud computing, and proactively develop strategies to mitigate potential risks to the organization.
•    Lead training and development initiatives to enhance the security skills of the IT team, emphasizing cloud security principles and practices.
•    Serve as the primary contact for external audits and security assessments related to Azure and AWS platforms, ensuring compliance with all regulatory and legal requirements.
•    Partner, coach and functionally lead IT, engineering, development and business teams.
•    Perform engineering performance testing to stress the limitations of security solutions while at the same time ensuring business innovation and day-to-day processes are not negatively impacted. 
•    Perform other duties as assigned.

Job Qualifications

• Education:  Batchelor’s degree (B.A./B.S.) or equivalent in computer science, information technology, or related discipline.
• Experience:  At least 10+ years of experience in cybersecurity, including compliance and risk management with a background in system and network security engineering.
  • An equivalent combination of education and experience may be accepted as a satisfactory substitute for the specific education and experience listed above.
• Certification/Licensure:  IT sec