Chief Cybersecurity Architect

Date Posted:

2024-01-26

Country:

United States of America

Location:

VA544: 22265 Pacific Blvd, Dulles 22265 Pacific Boulevard Building CC6, Sterling, VA, 20166-6920 USA

Position Role Type:

Hybrid

You have been redirected to RTX’s career page as we have recently transitioned from RTX to become a standalone company, which provides us with greater autonomy and opportunities for growth. As a prospective employee of Nightwing, you’ll have the chance to contribute to our continued success and shape the future of our cybersecurity, intelligence, and services offerings.

As the Chief Cybersecurity Architect, you will be a key leader responsible for developing, assessing, and maintaining a comprehensive cybersecurity architecture for our organization. You will play a crucial role in safeguarding our company's digital assets, ensuring data privacy, and maintaining the highest standards of cybersecurity. The Chief Cybersecurity Architect will be required to effectively translate business objectives and risk management strategies into specific security processes enabled by security technologies and services.

**Key Responsibilities:** 

• Develop and maintain a robust cybersecurity architecture strategy aligned with the organization's goals and objectives.
• Develop and document security architecture blueprints, guidelines, and best practices for consistent implementation across projects.
• Ensure the architecture and services complies with relevant cybersecurity regulations, industry standards, and certifications (i.e. NIST CSF, DFARs, CMMC
• Design and oversee the integration of security measures into cloud-based, on-prem and hybrid systems , ensuring compliance with NIST standards and the NIST Cyber Security Framework
• Develops and maintains a security architecture process that enables the enterprise to develop and implement security solutions and capabilities that are clearly aligned with business, technology and threat drivers
• Validates IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable
• Coordinates with the privacy officer or office to document data flows of sensitive information in the organization (e.g., PII or ePHI) and recommend controls to ensure that this data is adequately secured (e.g., encryption and tokenization)
• Reviews network segmentation to ensure least privilege for network access
• Conducts or facilitate threat modeling of services and applications that tie to the risk and data associated with the service or application
• Reviews security technologies, tools and services, and makes recommendations to the broader security team for their use, based on security, financial and operational metrics
• Provide expert guidance to cross-functional teams, including architecture, engineering, operations, and compliance, to ensure security considerations are embedded in all stages of project lifecycles. 
• Evaluates the statements of work (SOWs) for these providers to ensure that adequate security protections are in place. Assesses the providers' SSAE 16 SOC 1 and SOC 2 audit reports (or alternative sources) for security-related deficiencies and required "user controls" and report any findings to the CISO and vendor management teams
• Liaises with the Supply Chain team to conduct security assessments of existing and prospective vendors, especially those with which the organization shares intellectual property (IP), as well as regulated or other protected data:
  • Software as a service (SaaS) providers
  • Cloud/infrastructure as a service (IaaS) providers
  • Managed service providers (MSPs)
  • Payroll providers

• Collaborate with teams to develop   cybersecurity policies and procedures to protect the company's information assets.
• Participates in application and infrastructure projects to provide security-planning advice
• Continuously assess the organization's security posture, identify vulnerabilities, and recommend remediation strategies

• Promote a culture of security awareness and provide cybersecurity training to employees.
• Stay updated on emerging cybersecurity threats and technologies, and adapt the security architecture accordingly.
• Build and lead a high-performing cybersecurity team, providing mentorship and guidance.
• Demonstrated ability to develop and communicate a business case for technology investment to senior management and executive audiences. 
• Excellent communication and leadership skills.
• Ability to think strategically and drive innovative solutions to complex security challenges.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field. A master's degree is a plu