Enterprise Security Architect

Job Summary:

In our dynamic and fast-paced environment, we are seeking a visionary Enterprise Security Architect to push the boundaries of innovation, fortifying our digital ecosystem against emerging threats. As an industry leader, Estes Express is committed to shaping the future, and we recognize the pivotal role of a creative and forward-thinking Enterprise Security Architect in achieving this vision. As an Enterprise Security Architect at Estes Express you will be at the forefront of transforming how we safeguard our digital ecosystem. This role isn't just about traditional security practices; it's an opportunity to innovate, experiment, and lead the charge in architecting security solutions that resonate with the speed and excellence of our industry-leading organization. We are not just pioneers; we are revolutionaries in trucking and transportation, setting the standard for modernization and thought leadership. Our commitment to pushing boundaries extends beyond our products and services, reaching into the heart of our digital infrastructure.

• Develop and maintain an enterprise-wide security architecture strategy aligned with business goals and objectives.
• Design and implement security solutions that address Estes’ information security requirements.
• Evaluate and recommend new security technologies and tools to enhance the overall security posture. Stay current on emerging information security technologies and industry best practices.
• Collaborate with executive leadership to ensure alignment of security initiatives with overall business goals.
• Understand complex attacks, leverage threat intelligence, and employ analytics to enhance the enterprise security posture
• Understand the landscape of threats, their sources, methods employed and potential targets
• Utilize threat intelligence to predict, detect and counteract threats before they compromise a system
• Conduct risk assessments to identify and prioritize potential security vulnerabilities, threats, and risks.
• Collaborate with other departments to analyze and assess the impact of security threats and vulnerabilities.
• Develop risk mitigation strategies and implement security controls. Ensure that risk management practices align with industry best practices and compliance requirements.
• Ensure compliance with relevant laws, regulations, and industry standards. Participate in audits and regulatory assessments.
• Establish, maintain, and audit cyber security guidelines, standards, policies and procedures.
• Coordinate with other IT and business units to integrate security into daily operations.
• Ensure compliance with industry regulations and standards (e.g., GDPR, HIPAA, ISO 27001).
• Provide guidance on security best practices to ensure compliance to standards and best practices.
• Lead and contribute to security awareness programs to educate employees about security policies and best practices.
• Mentor and train on security best practices to insure a focus on security across the enterprise.
• Collaborate with training teams to develop and deliver security training programs.
• Develop and maintain an incident response plan.
• Coordinate and participate in security incident response activities.
• Conduct post-incident assessments to improve incident response capabilities.
• Work closely with other IT teams, such as network, infrastructure, and application development, to integrate security into their processes.
• Collaborate with external vendors and partners to ensure security requirements are met.
• Regular attendance is required.
• This is not an all-inclusive list of job requirements and/or duties and may not contain all mental and physical capabilities necessary to perform the job at all times due to circumstances. Operational, safety and other needs may require the employee to perform any and all other duties as assigned. Employees are expected, and must be able to perform all such duties and tasks.

Qualifications:

• Bachelor's in Information Security, Cybersecurity, Computer Science or any combination of education and experience which would provide an equivalent background. Master’s degree preferred.
• 5 or more years of cyber or information security experience, with a focus on security architecture within complex, diverse enterprise environments required.
• 4 or more years of experience in software development, infrastructure engineering, technical architecture, or similar discipline required. 5 to 9 years preferred
• Strong working knowledge of firewalls, VPN, routers, servers, zero-trust technology, WAF, API Gateways and IDS/IPS, network access controls, DevSecOps, and network segmentation required.
• Strong leadership and influence skills
• Must b