Cyber Security Architect

Job Description:

Looking for a rewarding career? Johnson Brothers is a leading family-owned distributor of wine, spirits, and beer, delivering exceptional service since 1953. We proudly represent the world’s top beverage brands and are committed to excellence, innovation, and growth. Johnson Brothers offers exciting opportunities in a variety of areas. Join our passionate team and help shape the future of the beverage industry!

The Architect – Cyber Security directs strategy, implementation and ongoing effectiveness of the organization's security infrastructure, ensuring the protection of systems and data through security controls, policies, standards and procedures.  This role ensures that the stakeholder security requirements necessary to protect the organization's mission and business processes are adequately addressed in all aspects of enterprise architecture including reference models, solution architectures, and the resulting systems supporting those missions and business processes.  This role also maintains a third-party risk management program, further managing information security risk reducing third party risk and further protecting the organization’s enterprise information assets.  The scope of responsibility will encompass all applications and infrastructure, on-premise and cloud delivered, including the technical implementation, governance, policies and procedures which apply to the information security architecture program. 

This role is a hybrid position requiring the candidate to be on site at our St. Paul location 3x a week.

Job Responsibilities:

• Direct and approve the design of security systems and solutions, across the entire IT portfolio of assets, systems and projects. This includes documenting and addressing organization's information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition life cycle.

• Engage with project teams to ensure security is embedded in solution design and implementation for all IT projects.

• Employ secure configuration management processes.

• Ensure that acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.

• Identify and prioritize critical business functions in collaboration with organizational stakeholders.

• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.

• Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment.

• Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in system and third-party vendor documents.

• Determine the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately.

• Collaborate with the IT Architecture team to promote architecture processes and practices across the organization.

• Maintain a Third-Party Risk Management program, including at a minimum, annual reviews of all third-party technology vendors.

• Create, socialize and secure executive sponsorship for security policies and controls.

• Make sure that cyber security policies and procedures are communicated to all personnel and that compliance is enforced.

• Participate in governance activities to oversee the Security Program and engage executive team as appropriate.

• Maintain a current understanding the IT threat landscape and apply that understanding to constantly improve our security program and reduce risk.

• Collaborate with IT asset inventory owners and security architectures needed to ensure the full understanding and ability to secure our environment and reduce risk.

• Schedule and execute periodic security audits to confirm the security program is preforming as expected.

• Constantly update the cyber security strategy to leverage new technology and threat information.

• Communicate best practices and risks to all parts of the business. 
   

Skills Required:

• Direct experience with information security architecture process, practices, frameworks and governance, supporting medium to large enterprises.

• Strategic thinking to identify risks and trends to stay ahead of threats and protect the company.

• Understand multiple complex systems and technology at a detail level in a constantly changing threat environment.

• Deep base of technical understanding and practical experience for networking, servers, data centers, workstations, software, all