Information Security Architect

Description

From Intake to Outcomes, CareMetx is dedicated to supporting the patient journey by providing hub services, innovative technology, and decision-making data to pharmaceutical, biotechnology, and medical device innovators.

 

Job Title: Information Security Architect

POSITION SUMMARY: The Information Security Architect will be responsible for designing, implementing, and maintaining the security architecture for our applications and systems. This role requires a deep understanding of security principles, threat modeling, and risk management to ensure that our systems are secure from potential threats. The ideal candidate will work closely with engineering, CloudOps, and other stakeholders to integrate security best practices into all stages of the systems development lifecycle. 

PRIMARY DUTIES AND RESPONSIBILITIES:

Security Architecture Design: 

- Develop and maintain security architectures for applications and systems. 

- Ensure that security architecture aligns with industry standards and regulatory requirements. 

- Contribute to the creation and implementation of security policies, procedures, and guidelines. 

Risk Assessment and Management: 

- Conduct security risk assessments and threat modeling. 

- Identify vulnerabilities and develop mitigation strategies. 

 - Collaborate with stakeholders to understand security requirements and constraints   

Integration and Implementation: 

- Work with development teams to integrate security controls into the software development lifecycle. 

- Ensure secure coding practices are followed. 

- Oversee the implementation of security solutions and technologies. 

Collaboration and Communication: 

- Work closely with IT, development teams, and other stakeholders to promote a culture of security. 

- Provide training and guidance on security best practices. 

- Communicate security risks and recommendations to non-technical stakeholders. 

Continuous Improvement: 

- Stay current with the latest security trends, threats, and technology solutions. 

- Continuously evaluate and improve security architectures and practices. 

- Participate in incident response and post-incident analysis. 

EXPERIENCE AND EDUCATIONAL REQUIREMENTS:

• Bachelor’s degree in computer science, Information Technology, or a related field. Master's degree preferred. 
• Minimum of 5 years of experience in information security, with a focus on application and systems architecture. 
• Relevant certifications such as CISSP, CISM, CEH, or similar are highly desirable. 
• Software Engineering background - with the ability to train, educate other software engineers how to code secure applications and remediate software based vulnerabilities. 
• Familiar with software stack (e.g. .NET, MSSQL, React) Proficiency in security technologies (e.g., firewalls, intrusion detection systems, encryption). 
• Strong understanding of network security, cloud security, and secure software development practices. 
• Experience with security frameworks and standards (e.g., ISO 27001, NIST). 
• Excellent problem-solving and analytical skills. Strong communication and interpersonal skills. 
• Ability to work independently and as part of a team. 

MINIUMUM SKILLS, KNOWLEDGE AND ABILITY REQUIREMENTS:

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• While performing the duties of this job, the employee is regularly required to sit.
• The employee must occasionally lift and/or move up to 10 pounds.

Work Environment

The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. The noise level in the work environment is usually moderate. 

 

Schedule

• Must be flexible on schedule and hours
• Some travel may be required

CareMetx considers equivalent combinations of experience and education for most jobs. All candidates who believe they possess equivalent experience and education are encouraged to apply. 

 

At CareMetx we work hard, we believe in what we do, and we want to be a company that does rig