Senior Security Architect

Overview

The Senior Information Security Architect is responsible for developing and maintaining robust security architectures and strategies for safeguarding the organization's cloud-based infrastructure, applications, and data. This role requires a deep understanding of cloud security technologies, compliance standards, and best practices to ensure the confidentiality, integrity, and availability of sensitive information. The Information Security Architect will collaborate with cross-functional teams to design, implement, and manage security solutions in cloud environments.

 

Essential Functions Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.  

Security Infrastructure Architecture:

• Develop and implement a comprehensive security architecture for-on-premisis and cloud technologies  that are  aligned with the CISO’s overall strategy for the information security organization.’.
• Stay current with emerging on-premisis and cloud security threats, vulnerabilities, and trends to proactively address potential risks.
• Actively participate within  ACA technology  Committees where  solutions are evaluated for the enterprise 

• Design and document secure on-premisis and cloud security architectures, taking into account multi-cloud and hybrid cloud environments.
• Create and maintain security reference architectures, patterns, and guidelines..
• Understand and participate in the configuration of solutions  and strategies that satisfy NIST Cybersecurity Framework control objectives in collaboration with the department’s GRC team.

Identity and Access Management (IAM):

• Implement robust IAM solutions to manage user access, roles, and permissions effectively.
• Enforce strong authentication and authorization mechanisms 
• Assist the IAM team with privileged access management (PAM) solutions and deployment architectures.

Data Protection:

• Develop strategies for data encryption, PKI, tokenization, and masking in the cloud and on-premisis.
• Architectdata leakage prevention (DLP) measures and systems  to protect sensitive information. 
• Provide architecture advisory and solutions that satisfy NIST data protection controls.

Network Security:

• Provide architectural design and implementation guidance to information security teams to secure network configurations in the cloud and on-premisis, including firewall rules, virtual private networks, and network segmentation.
• Implement network monitoring and intrusion detection systems.

Compliance and Governance:

• Ensure cloud and on-premesis environments comply with industry standards and regulations (e.g., HIPAA, PCI DSS, NYDFS, NIST).
• Collaborate with GRC teams to ensure proper monitoring and reporting mechanisms.
• Maintain an active role within the enterprise GRC teams within Information Security, Compliance, and Internal Audit.

Security Operations:

• Collaborate with the security operations center (SOC) to define incident response procedures and threat hunting strategies specific to cloud and on-premises environments.
• Assist with continuous improvement of ACA SOC operations where security logs and events are monitored and analyzed to detect and respond to security incidents promptly.
• Assist the SOC teams to ensure appropriate level of alerting is configured across all  environments

Security Testing and Assessment:

• Support regular security assessments, vulnerability scanning, and penetration testing of assets.
• Advise upon identified vulnerabilities and assist with translating risk ratings to ACA risk rating.

Security Awareness and Training:

• Assist with training programs for employees and other stakeholders.
• Promote a culture of security awareness and compliance within the organization.

Vendor and Third-Party Risk Management:

• Assess security risks associated with cloud service providers and third-party integrations.
• Review and recommend security terms within cloud solution contracts (includes SaaS, IaaP solutions)

Strategy Planning:

• Evaluate documented architectures and analyze trends for ways to prevent future problems
• Research and recommend innovative, and where possible, automated approaches for information security team  tasks.
• Identify approaches to solutions that leverage our resources and provide economies of scale
• Keep current with the latest security technologies and coach staff regarding leading and best practice strategies and solutions 

Personal Attributes:

• Ability to conduct resea