Enterprise Security Architect

Main Objective:

The Enterprise Security Architect will be responsible for developing and maintaining a comprehensive information security architecture program and representing information security requirements for all technology solutions and business processes. This position will work with a growing team of enterprise architects to ensure effective controls are implemented and maintained in support of confidentiality, integrity and availability of information systems. Additionally, participating on a team involved in enforcing the information security policies and complying with requirements of security audits and recommendations.

Essential Duties and Responsibilities:

1. Develop and champion strategic information security solutions with Global Information Services (IT) and key business stakeholders.
2. Provide oversight of information security requirements on information technology and business sponsored projects.
3. Develop strategic roadmaps for information security capabilities such as authentication, encryption, and secure network design, detection and prevention technologies.
4. Design and implement long-term strategic goals and short-term tactical plans for managing and maintaining Information Security controls, standards and best practices.
5. Ensure that proposed and existing information systems architectures, solutions and services are in compliance with information security program controls, standards, best practices, and information security program policies.
6. Provide architectural expertise, direction, and assistance to information technology, service and solution providers, and key business stakeholders in support of information services development and operations.
7. Develop, document, and communicate plans for investing in information security architecture, including analysis of risk reduction opportunities and the emerging threat landscape.

Incidental Duties:

The above statements describe the general nature and level of work being performed in this job.  They are not intended to be an exhaustive list of all duties, and indeed additional responsibilities may be assigned, as required, by management.

Education and Experience:

• Bachelor’s Degree required; preferably in Computer Science or related field preferred.
• 12 years of experience in information security required. 
• Certified Information System Security Professional (CISSP) preferred.
• Experience in the medical device or life-sciences industries is a plus.
• Experience with Securing cloud (IaaS, PaaS, and SaaS) deployments required.
• One or more cyber security certifications such as the CISSP (+ISSAP), CCSP, SABSA GSEC, or other relevant certifications preferred.

Knowledge and Skill Requirements/Specialized Courses and/or Training:

• Extensive experience in developing strategic information security plans, including the development of baseline security standards, information system hardening guides, and information security requirements documentation.
• Excellent analytical skills, organizational, time management and problem solving skills are essential
• Verbal communication skills required for this position requires interaction with all levels of the organization

All qualified applicants will receive consideration for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.