The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.

Need Help?

If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to Accessibility (accommodation requests only; other inquiries won't receive a response).

Regular or Temporary:

Regular

Language Fluency:  English (Required)

Work Shift:

1st shift (United States of America)

Please review the following job description:

Derive security specifications from business requirements, and design security solutions that support core organizational functions, and assure their confidentiality, integrity and high availability. Gain organizational commitment for security infrastructure systems and software plans, as well as assist to evaluate and select security technologies required to complete those plans. Provide integrated infrastructure-related technical expertise across the organization, from conceptualization and project planning to the post-implementation support level. Principally works, under limited supervision, with Corporate Information Security (CIS) personnel, Line of Business (LOB) personnel, external vendors, and internal IT Services personnel including Enterprise Architects, Application & Data Services personnel and other IT Operations Services teams. Security Solution Architects develop security specifications, requirements and architecture artifacts in compliance with corporate standards, laws and regulations for architecture adherence and performance guidelines.

Essential Duties and Responsibilities

Following is a summary of the essential functions for this job.  Other duties may be performed, both major and minor, which are not mentioned below.  Specific activities may change from time to time. 

• Architecting effective and efficient fit for purpose solutions that meet the Bank’s needs and requirements - includes creation of Cybersecurity Blueprints that will present detailed views of application interaction/integrations between both on prem and cloud-based applications.
• Applies in-depth and specialized expertise in Identity and Access Management and significant breadth of experience across cyber / information security.
• May be called upon to contributed to scope and business cases
• Participates in the gathering and development of requirements by coaching stakeholders and decomposing business requirements into technical and system requirements
• Interpret requirements to determine the best solutions and approaches
• Creates architectures and operational documentation with support of engineering and operations staff
• Advise, consult, lead, guide and mentor project teams, engineers, analysts, and support staff in the delivery of solutions
• Participate in the agile planning processes and delivery methodologies
• Build relationships with internal clients
• Conducts threat modeling and security gap assessment exercises in concert with other teams
• Contributes to the creation of policy, standards, Minimum Security Baselines (MSBs), procedures and guidelines
• Bring visibility to and escalates security risks, as well as, technical, execution, deployment, or other risks as applicable
• Conducts post-mortem reviews of projects / products to measure design versus implementation differentials
• Contribute to the Truist Cyber Architecture Practice by supporting Cyber Enterprise Architecture objectives

Qualifications

Required Qualifications:

The requirements listed below are representative of the knowledge, skill and/or ability required.  Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• Bachelor's degree in a technical or business field, or equivalent education and related training
• Eight years of demonstrated experience of systems engineering and/or architecture in at least one of the information security areas:  network security, access management, end point protection, data loss prevention, vulner