Cybersecurity Architect

This is a fully remote position, open to applicants in California, +9 more states.

📋 Description

• Collaborate with the Vice President of Information Security to create a security program and prioritize security initiatives that align with the organization's strategic roadmap.

• Act as the technical authority in information security and the final escalation point for security team members, incidents, and requests.

• Engage with Application and Infrastructure departments, business-unit leaders, and partner organizations to design and implement the corporate security vision.

• Create and deploy strong, scalable, and resilient security architectures for systems and applications.

• Establish and maintain architectural security standards, guidelines, and best practices.

• Identify, assess, and provide design solutions for security risks within enterprise projects.

• Review existing systems and suggest enhancements to bolster security posture.

• Collaborate with business leaders and IT teams to propel security strategy and direction.

• Generate management reports and metrics regarding information security risk and exposure.

• Offer information security expertise to technology teams and projects.

• Ensure that technologies comply with security-related policies, including FTC and PCI requirements.

• Adhere to local encryption regulations and privacy laws.

• Be a vital technical member of the Architecture Review Board.

• Assess significant technology initiatives and architectural changes for security, architecture, integration, operational impact, risk, and long-term supportability.

• Identify security concerns, dependencies, architectural impacts, operational considerations, and technical risks prior to implementation.

• Assist teams in evaluating alternative approaches and documenting architectural decisions.

• Determine which initiatives necessitate a more in-depth security and architecture review.

• Drive the implementation of security solutions in accordance with industry standards and organizational requirements.

• Oversee the configuration and deployment of cloud security governance and monitoring, firewalls, IDS/IPS, endpoint protection, encryption, privileged identity management, secure cloud posture management, secure application development technologies, and AI controls.

• Work alongside cross-functional teams to integrate security measures into both new and existing systems.

• Identify areas where security policies, standards, and procedures require modification or development.

• Evaluate and recommend security software and hardware, and their integration into existing architecture through proof of technology.

⛳️ Requirements

• Bachelor's degree in a relevant technical or business field and/or 10+ years of equivalent work experience.

• 3+ years of experience as a security architect or consultant within an enterprise context.

• Strong written and verbal communication skills, along with effective interpersonal and collaboration abilities.

• Capability to articulate security and risk-related concepts to both technical and non-technical audiences.

• Comprehensive understanding of information security practices pertaining to PCI, SOX, FTC, and OWASP application security.

• Exceptional analytical abilities.

• Ability to manage multiple projects under tight deadlines.

• Capacity to thrive in a demanding, dynamic environment and achieve overall objectives.

• Professional security management certification such as CISSP, CISM, AWS or Azure security and architecture certifications, CISA, or similar credentials is desirable.

• Familiarity with ISO/IEC 27001, ITIL, COBIT, NIST, and CIS frameworks is preferred.

• Proficiency in designing secure, scalable, and resilient security architectures, including those utilizing AI.

• Knowledgeable in firewalls, IDS/IPS, SIEM, endpoint protection, and encryption mechanisms.

• Understanding of network security principles, including VPN, SSL/TLS, IPsec, DNSSEC, SASE, and Zero Trust architecture.

• Acquainted with cloud security and AWS, Azure, or GCP environments, including IAM, data encryption, and secure configuration.

• Familiar with secure coding practices, WAF, SDLC, and vulnerability assessment tools.

• Proficient in securing Windows, Linux, and Unix operating systems.

• Knowledgeable about cryptographic principles, digital signatures, SSL/TLS, and PKI.

• Familiarity with GDPR, HIPAA, PCI DSS, and other security regulations.

• Knowledge of data loss prevention, file integrity monitoring, SIEM, data scanning and tagging, and Microsoft AIP.

🏝️ Benefits

• Vacation: 12-25 days, depending on grade.

• Company-paid holidays.

• Personal Days.

• Sick Leave.

• Medical, dental, and vision coverage.

• Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada).

• Life and disability insurance.

• Employee assistance programs.

• Additional benefits as provided by local policy and eligibility.

• Variable incentives, bonuses, or commissions may be available based on the position and applicable laws.