Information Security Architect

Job description
As an Information Security Architect, you would hold an influential role.Your key responsibility would be to enhance the security of applications and systems.You would also play a pivotal role in reducing the likelihood of coding, design or configuration vulnerabilities affecting production environments, thereby mitigating potential security risks.Your responsibilities will include collaborating with business and technical resources, reviewing project documentation, and referencing security policy to offer recommendations and guidance.You will also have the authority to approve or reject project artifacts from a security perspective, ensuring the highest level of security for the organization's systems, processes, and software applications.Essential Job Functions:Defining security requirements by evaluating business strategies and requirements; researching information security standardsProviding consulting services and security support to internal business and technology customersServing as the lead security liaison on assigned projects.Providing input and recommendations to the development teams related to architecture, design, coding practices and SDLC elements that could potentially impact the application or solution from a security perspective.Validating controls for Encryption, Access Control, Web Application Vulnerability Detection, OWASP top 10 and other common web application security parameters.Reviewing application architecture and design from an application security and information security perspective ensuring alignment with organization security standards and industry best practices.Serving as a subject matter expert (SME) for performing vendor risk assessments (including Cloud Services) to improve overall vendor risk program.Assisting with the development of secure coding standardsProviding technical expertise on secure software development and support of all associated activities, processes, and tools for protecting technology-based informationEnsuring that development is done in accordance with industry standards for secure developmentFacilitating Periodic static code analysis utilizing existing standard service offering.Facilitating dynamic and/or manual security testing utilizing existing standard service offeringReviewing, developing, testing, and implementing security plans, products, and control techniquesReviewing circumstances surrounding security gaps in and designs corrective actionsMaintaining awareness of security and technology trends and shares that knowledge with othersEvangelizing security policies, standards, and nonfunctional requirements where/when neededDaily and Weekly Status Reporting - for Work in Process and Planned and issuesDocumenting processes, procedures, assessment outputs, working papers documentation to support existing SDLC and governance requirementsRepresenting security and IT risks among other company risk departments and committees.Evaluating the effectiveness of awareness and training programs and makes recommendations for improvement.Mentoring less-experienced team members and collaborating across Information TechnologyQualifications:Bachelor's Degree in Computer Science, Information Systems or other related field, or equivalent work experience10-15 years of combined IT and security work experience with a broad range of exposure to systems analysis, application development, systems administration and over five years of experience designing and deploying security for Business products and services and Enterprise solutions at the enterprise level.Preferred Certification in one or more Information Security relevant areas such as Audit (CISA), Security Management (CISM), Security Professional (CISSP), Cloud Security (CCSP, CCSK, AZ500Requires in-depth knowledge of security issues, techniques and implications across all existing computer platforms.Experience with evaluating and implementing security controls as related to Cloud based services including SaaS, PaaS, IaaS.Strong computer skills to operate effectively with company systems and programs; working knowledge of applicable computer applications used at ABCWorking knowledge of network solutions and systemsGood analytical and problem-solving skillsAbility to communicate effectively both orally and in writingGood interpersonal skillsAbility to prioritize workload and consistently meet deadlinesStrong organizational skills; attention to detailAbility to lead and provide direction to project/product teamsStrong consultative skills: ability to interface effectively with technical and non-technical leaders.Understands Information Security as it relates to the business and other areas of IT; understands direct impacts and risks.Demonstrated sound understanding of at least 3 of the following control frameworks such as ISO 27001/27002, HITRUST, PCI, NIST, GDPR and PCIBusiness experience in a matrix Organization required