Senior Information Security Architect - Data Protection

Company :

Job Description : 

JOB SUMMARY

***CANDIDATE MUST BE US Citizen (due to contractual/access requirements)***

This job takes a lead role in developing and guiding implementations of practical security architectures that appropriately mitigate risks depending on factors such as data sensitivity and operational impacts; this role will focus on, but not be limited to supporting Data Protection solutions. Security architectures must be developed in alignment with IT and security standards, applicable security and control frameworks, and security best practices. Experience producing Threat Models to evaluate proposed technical architectures. Any control, policy or standard gaps identified during the course of developing security architectures or Threat Modeling exercises must be documented and formally assessed through standard risk assessment processes. The Senior Information Protection Security Architect must have the ability to provide detailed technical recommendations on appropriate mitigation measures. Must be able to effectively collaborate, advise, and consult colleagues responsible for developing and implementing technical architectures, services and controls. Research and evaluate new security technologies to be used as practical point solutions to address gaps where existing tools and services are deemed to be inadequate. Security architecture work will include data protection, network security and defense, operating system security, identity, authentication, and authorization, application security, activity audit and monitoring, mobile computing security, and third-party access to corporate systems/data. Must have competency in developing and applying sound and practical security architecture principles within both On Premises and multi-Cloud environments. The ability to produce detailed and accurate security architecture documentation and accompanying narratives as well as strong verbal and written communication with stakeholders at all levels of the organization, including executive leadership, is required. This role is expected to provide mentorship to peers and more junior team members.

ESSENTIAL RESPONSIBILITIES 

• Enhance security team accomplishments and competence by leading delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members.
• Determine most complex security requirements by evaluating business strategies and requirements; conducting system security and vulnerability analyses and risk assessments; identifying integration issues; preparing cost estimates.
• Lead security systems by evaluating network and security technologies.
• Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures.
• Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures.
• Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.
• Provide leadership and mentoring in the areas of expertise and architecture to  peers, developers, management and business users including technical expertise, coaching, and ad-hoc training.
• Support assurance compliance to required standards, procedures, guidelines and processes.
• Other duties as assigned or requested.

REQUIRED EDUCATION

• Bachelor’s Degree in Information Systems, Computer Science, Information Security, Engineering, or related field, or or relevant experience and/or education as determined by the company in lieu of bachelor's degree

PREFERRED EDUCATION

•  Master’s Degree in Computer Science, Information Security, or related field

EXPERIENCE

Minimum: 

• 7-10 years' experience architecting solutions              
• 10-15 years' experience in Information Security 
• Experience communicating with business partners
• Use of security patterns and security best patterns such as threat modeling

Preferred:

• 10 - 15 years' experience architecting solutions

KNOWLEDGE, SKILLS & ABILITIES 

• Business communication skills, both written and verbal and able to solve unconventional problems                       
• Understanding of the TCP/IP protocol stack, application protocols such as SNMP, SMTP, DNS, and DHCP; IPSec and SSL VPNs; SSL/TLS protocol knowledge