As a Security Architect and Engineer, you will lead the charge in fortifying our organization's security infrastructure. Your role encompasses designing and implementing robust security solutions tailored to our unique needs, ensuring that our systems, data, and networks remain resilient against potential threats. Collaborating closely with various stakeholders, you'll assess existing security frameworks, implement effective measures, and uphold stringent standards. The individual will be a key member of the Architecture Review Board (ARB), helping ensure significant technology initiatives are evaluated for security, architecture, integration, operational impact, risk, and long-term supportability. Your responsibilities extend beyond design, encompassing practical implementation and integration of security solutions into our existing infrastructure. You'll configure and deploy tools such as privileged identity management, secure cloud posture management, and secure application development technologies, AI controls, ensuring seamless integration while upholding rigorous security protocols.
Architectural Security Design: - Develop and maintain architectural security standards, guidelines, and best practices.
- Design secure, scalable, and resilient security architectures for various systems and applications.
- Identify, quantify, and provide design remediations for security risks as they relate to enterprise projects.
- Evaluate existing systems and propose enhancements to improve security posture.
- Partner with business members and IT leaders to drive security strategy and direction
- Produce management reporting, including appropriate metrics that inform senior leadership as to the state of information security risk and exposure
- Understands security product / service cost drivers and industry and business trends impacting the client information security program
- Provide information security matter expertise to technology teamsand projects
- Ensure that the organization is leveraging the proper technologies to meet security related policies (including FTC, PCI)
- Ensure compliance with local regulations e.g. local encryption regulations and privacy law
Architecture Review Board - Serve as a key technical member of the Architecture Review Board (ARB).
- Review significant technology initiatives and proposed architectural changes.
- Identify security concerns, dependencies, architectural impacts, operational considerations, and technical risks before implementation.
- Help teams evaluate alternative approaches and document architecture decisions.
- Improve the quality and consistency of technical information presented to the ARB.
- Help determine which initiatives require deeper security and architecture review. This aligns with prior internal discussion that Security should help evaluate projects against agreed standards and determine which should proceed through architecture review.
Security Solution Implementation: - Implement security solutions based on industry standards and organizational requirements.
- Configure and deploy security tools, such as cloud security governance and monitoring, firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms.
- Collaborate with cross-functional teams to integrate security measures into new and existing systems.
- Recognizes and identifies potential areas where existing technical security polices standards and procedures require change, or where new ones need to be developed, especially regarding future business expansion
- Evaluate and recommend security software/hardware and its integration into existing architecture(Proof of Technology)
|
