Cybersecurity and Information Security Architect

Position: Cybersecurity and Information Security Architect

We are looking for a skilled and experienced Cybersecurity Architect to join our Security Governance and Monitoring Team.

What will you do?

• Provide security guidance and support for business, infrastructure, and application projects across the organization
• Write and define security requirement documents for new systems and organization-wide projects
• Identify and manage risks in business and technology projects, including expertise in PCI environments
• Design, define, and implement security architectures, policies, and protection solutions for both on-premises and cloud infrastructures
• Promote secure development practices and establish organization-wide standards for application security
• Oversee implementation of defined security policies across systems and projects
• Map, analyze, and identify opportunities and new technologies in on-premises and cloud security environments
• Maintain regular communication with relevant stakeholders throughout the organization
• Maintain a comprehensive and strategic view of information security across the organization and drive activities to reduce vulnerabilities

What are we looking for?

• At least 5 years of hands-on experience in cybersecurity and information security – must
• Proven experience in a cybersecurity architecture role – must
• Experience working with development methodologies (Agile, SDLC) – must; experience leading secure development with GitHub interfaces – must
• Strong background in code scanning tools and secure development processes such as Checkmarx, Nessus – must
• Experience performing risk assessments, security surveys, and knowledge of common attack vectors such as DDoS, ransomware, OWASP Top 10 – must
• Proven familiarity and hands-on experience with security products and established cybersecurity methodologies, including Proxy, Firewall, F5, RBI, DLP, EDR – must
• Experience designing security architectures for both on-premises and cloud environments – must
• Familiarity with PCI-DSS standards – must