ZipRecruiter
Job Description We are looking for a Lead Information Security Architect who will be responsible for developing and maintaining a comprehensive information security architecture program. The role involves representing information security requirements across all technology solutions and business processes, covering multiple disciplines such as systems & networking infrastructure, DevOps, security, business applications, cloud security, and data architecture. The role oversees cybersecurity for our company's digital products, including software, firmware, or products containing code. This includes implementing a product security program designed to address cybersecurity throughout the product lifecycle. The role also involves identifying and mitigating technical and operational threats, analyzing the security, supportability, and feasibility of new technology, and ensuring compliance with regulatory guidelines and industry best practices. This position requires high-level analytical problem-solving skills to diagnose and resolve complex technical issues, along with excellent process management and communication skills. Note: U.S. and those authorized to work in the U.S. are encouraged to apply. We are unable to sponsor at this time. To be Successful in this Role Develop an architectural vision to support the growth of the product suite. Knowledge of Data Security Best Practices: At Rest, In Flight, In Use. Experience with privacy-enhancing technologies and encryption techniques. Understanding of cloud security architecture strategies, frameworks, and reference models. Ability to develop effective partnerships with senior management and peers, and explain technical concepts to non-technical executives. Build Risk Models and analyze security weaknesses in complex deployments. Provide security expertise on cloud architecture, design, implementation, maintenance, governance, and risk management projects. Work with governance teams to establish automated processes and best practices for AWS, Azure IAM policies, roles, federation, etc. Conduct automated or manual security validation of cloud templates and infrastructure. Collaborate with business units to ensure solutions align with organizational policies and standards. Develop and enforce standards and guidelines for infrastructure solutions, development processes, hardware, and data design. Partner with stakeholders to build scalable, agile security architecture. Assess current IT portfolios and design future strategies to meet business objectives. Make strategic technology recommendations and incorporate them into roadmaps. Ensure alignment with long-term business requirements and provide thought leadership. Optimize architectural components for cost, flexibility, reliability, and security. Balance strategic planning with urgent delivery in a fast-paced environment. Manage influence and demonstrate credibility as a thought leader. Build long-term relationships with internal customers and stakeholders. Document architecture designs and relationships comprehensively. You Will Have 8+ years of experience in information security architecture, with expertise in defense-in-depth reference architectures. Industry security certifications such as CISSP, CISM, CISA, CCSP, etc. Knowledge of information management, SDLC, ITSM, agile/lean methodologies, infrastructure, and operations. Familiarity with SaaS, IaaS, PaaS, SOA, APIs, microservices, event-driven IT, and analytics. Hands-on experience with AWS, Azure, and GCP. Understanding of security solutions like IDS, IPS, SIEM, vulnerability scanning, and compliance. Experience with attack mitigation, network protocols, OS internals, web security, penetration testing, cryptography, intrusion detection, incident response, and automation frameworks. Proven ability to manage and contribute to incident response plans. Experience in developing strategic security plans, standards, and requirements documentation. #J-18808-Ljbffr