REMOTE WORK OPPORTUNITY- SECURITY OPERATIONS ARCHITECT OPENING
___________________________
Security Operations Architect
Hours: Full Time
Location: THIS IS A REMOTE ROLE. Rate: Salary commensurate with experience + great benefits!
Job Summary:
The Information Security Architect provides strategic foresight and long-term development planning for future security related technology impacting the company. This role will serve a primary role of designing and leading the implementation of an enterprise-wide security architecture based on business requirements and information technology strategies. This role will assume the lead role in carrying out strategic security initiatives focused on designing, planning, developing, and synchronizing strategic technological directives and implementation recommendations. Activities involve extensive coordination of technology studies and research. This role will develop and maintain information security standards and processes and apply in-depth knowledge of functional aspects of information systems security and compliance. This position will directly contribute to the overall global enterprise cloud architecture and lead the security vision and strategy around cloud-based applications, across all types (including Infrastructure, Platform, and Software as a Service (IaaS/PaaS/SaaS). They will serve as the central point of contact for T.S. and other teams within the organization for all matters related to cloud security.
Responsibilities:
Research, develop, continuously improve and implement security policies, procedures, standards and processes based on compliance requirements and industry best practices. Enforce information security policies and procedures by reviewing security violation reports, investigating possible security exceptions and documenting security controls. Determine technology and process requirements to implement security strategies. Publish and communicate enterprise security technology standards to assure architectural consistency in security technologies needed to protect the enterprise. Works closely with business and IT stakeholders as a subject matter expert in applications, infrastructure and cloud security; providing security architecture consulting services for projects and key enterprise initiatives.
Serve as an escalation point to research security testing and evaluation results. Research and report on current threats to the company’s environment. Publish and communicate enterprise security technology configuration baselines and standards to ensure architectural consistency in security technologies. Maintains up-to-date knowledge and awareness of industry trends related to Information Security and assess its impact on company operations.
Work closely with application development to assess the security posture of applications as a component of the Secure Development Life Cycle.
Participate as a key member of the Change Management Board to ensure changes to the environment do not adversely impact the security posture or increase risk.
Conduct technical security risk assessments against industry best practices and benchmarks to determine weaknesses and vulnerabilities. Recommend, implement and integrate information security technologies to mitigate identified risks.
Participate as a member of the company’s Computer Incident Response Team. Assist Security Operations Analysts in the identification, isolation, remediation and investigations of security incidents.
Requirements:
Bachelor' s degree, preferred- Information Technology, Computer Science, Information Security, Information Assurance
Advanced Industry Professional Certifications (Preferred; at least three)
ISC^2 – Certified Information Systems Security Professional (CISSP), ISACA – Certified Risk and Information Systems Controls (CRISC), SANS – GIAC Security Expert (GSE), ISC^2 – CISSP-ISSAP (Information Systems Security Architecture Professional), EC-Council – ANY, SANS – GIAC Security Essentials (GSEC), SANS – GIAC Certified Incident Handler (GCIH), SANS – GIAC Certified Intrusion Analyst (GCIA), ISACA – Certified Information Systems Auditor (CISA), ISACA – Certified Information Security Manager (CISM)
8+ years of experience
Excellent verbal and written communication skills
Strong problems solving skills
Solid strategic thinking and critical thinking skills
