senior cybersecurity architect.

As a Cybersecurity Architect, your primary responsibilities will include:

• Develop and maintain a security architecture process that enables the enterprise to develop and implement security solutions and capabilities that are aligned with business, technology and threat drivers.
• Develop and maintain security architecture artifacts (e.g., models, templates, standards and procedures) that can be used to leverage security capabilities in projects and operations.
• Determine baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation and IAM.
• Develop standards and practices for data encryption and tokenization in the organization, based on the organization's data classification criteria.
• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
• Track developments and changes in digital business and threat environments to ensure that they're adequately addressed in architecture artifacts.
• Validate IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable.
• Conduct or facilitate threat modeling of services and applications that tie to the risk and data associated with the service or application.
• Coordinate with the privacy officer to document data flows of sensitive information in the organization (e.g., PII or ePHI) and recommend controls to ensure that this data is adequately secured (e.g., encryption and tokenization).
• Liaise with VM team to conduct security assessments of existing and prospective vendors, especially those with which the organization shares intellectual property, as well as regulated or other protected data for third party providers.
• Coordinate with operational and facility management teams to assess the security of operational technology and IoT systems.
• Participate in application and infrastructure projects to provide security-planning advice.

5+ years of cybersecurity experience, with at least 3 years in a Security Architect, Solutions Ar

• Regulatory and Framework Expertise: NIST, PCI-DSS, GDPR, ISO 27001/2.
• Desired Professional Certifications, but not required: ISC2's CISSP, TOGAF, ISACA's CISA or SANS' GAIC.
• University degree, preferably in Computer Science, Cybersecurity, or a closely related technical field.
• A minimum of 5 years of dedicated cybersecurity experience, with at least 3 years of direct experience in a Security Architect, Solutions Architect, or Enterprise Architect capacity.
• Hands-on experience in managing security infrastructure - e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM and log management technology.
• Experience with vulnerability management tools.
• Experience with conducting threat-modeling exercises on new applications and services.
• Experience in securing the deployment of applications and infrastructure into public cloud services.
• Experience in designing IAM technologies and services.
• Strong working knowledge of IT service management (e.g., ITIL-related disciplines) and IT infrastructure.