Information Security Architect - Data Protection

The Information Security Architect - Data Protection develops and guides the implementation of security architectures that protect sensitive data and ensure business continuity by mitigating associated risks.
This position focuses on supporting Data Protection solutions, including Data Loss Prevention, File and Database activity monitoring, and encryption technologies, and requires collaboration with various stakeholders to ensure compliance with IT, privacy, and security standards.
The architect will also be responsible for producing threat models, documenting control gaps, writing policies / standards, and providing technical recommendations for security measures.
The ideal candidate will possess strong technical expertise in data protection and security architecture, with a proven track record of designing effective security controls.

ESSENTIAL RESPONSIBILITIES
Enhance security team accomplishments and competence by planning delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members.

Determine security requirements by evaluating business strategies and requirements; conducting system security and vulnerability analyses and risk assessments; identifying integration issues; preparing cost estimates.

Plan security systems by evaluating network and security technologies.

Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures.

Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments.

May begin to provide leadership and mentoring in the areas of expertise and architecture to peers, developers, management and business users including technical expertise, coaching, and ad-hoc training.

Support assurance compliance to required standards, procedures, guidelines and processes.

Other duties as assigned or requested.

REQUIRED EDUCATION
Bachelor's degree in Information Systems, Computer Science, Information Security, or Engineering, or relevant experience and / or education as determined by the company in lieu of bachelor's degree
PREFERRED EDUCATION
Master's degree in Computer Science, Information Security or related field
EXPERIENCE
5 - 7 years' experience architecting solutions
5 - 7 years' experience in Information Security
Experience communicating with business partners
7 - 10 years' experience architecting solutions
SKILLS
Business communication skills, both written and verbal and able to solve unconventional problems
Understanding of the TCP / IP protocol stack, application protocols such as SNMP, SMTP, DNS, and DHCP; IPSec and SSL VPNs; SSL / TLS protocol knowledge
Understanding of the information technology and information security industries, their current developments, trends, issues, and fundamental concepts
In-depth expertise in analyzing a wide spectrum of technical systems and services robustness and needs, and making practical recommendations to address them
Detailed knowledge of web, mobile, and client application security vulnerabilities, attack methods, and countermeasures
Experience with common information security management frameworks, such as HITRUST, ISO 27001, CobiT, ITIL
Knowledge of ubiquitous encryption technologies (PGP, SSH, SSL, etc.
) and common protocols (RADIUS, LDAP, KERBEROS, SAML, etc.
)
Participate in evaluations and recommend solutions to support enterprises security controls including :
networking, firewalls, IDS / IPS, data loss prevention, application security, infrastructure security, and datasecurity
REQUIRED LICENSURE
None
PREFERRED LICENSURE
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA), etc.

TRAVEL REQUIREMENT :
0%- 25%
LANGUAGE REQUIREMENT ()?
PHYSICAL, MENTAL DEMANDS AND WORKING CONDITIONS
Office-Based
An employee in this position works in an office environment.
The position frequently requires the employee to communicate effectively with others both inside and outside the workplace (e.
g.
, in person, via telephone, via email).
The employee must be able to understand, interpret and analyze data, solve problems, concentrate, and research, use available technological resources and systems (e.
, computers and computer programs), multi-task, prioritize, and meet multiple deadlines to complete essential tasks.
The employee generally works in a fast-paced and frequently stressful environment, must attend work on a regular and reliable basis as well as adhere to all workplace policies, and may be called upon to work outside regular business hours.

Teaches / Trains others regularly
Occasionally
Travels regularly from the office to various work sites or from site-to-site
Works primarily out-of-the office selling products / services (Sales employees)
Never
Physical Work Site Required
An employee in this position may work in a home or company office environment but is also frequently driving to and from various locations to perform the work off-site.

An employee in this position is frequently required to move throughout the workplace, sit, stand and walk, use hands and fingers to hold objects, tools or controls, possess fine motor skills (e.
, to write and operate a computer or to steer transportation equipment), possess gross motor skills (e.
, to carry items), reach with hands and arms, climb stairs and ladders, balance, stoop, kneel crouch and crawl, communicate effectively, and talk and hear.
Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus.
The employee must be able to work in a busy environment where decisions often must be made quickly, must attend work on a regular and reliable basis, must adhere to all workplace policies, and may be called upon to work outside regular business hours.
This work occurs in a [example :
warehouse, hospital or provider's office or mailroom].

Lifting :
up to 10 pounds
Does Not Apply
10 to 25 pounds
25 to 50 pounds
ADDITIONAL INFORMATION
Changes Approved By :

Kathleen Thompson
As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times.
In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well .