Senior AI Information Security Architect

Jobtailor; Deutschland; Vor Ort; EUR 120.000 - 190.000; Vollzeit

Zusammenfassung

Jobtailor is seeking an Information Security Architect to lead and evolve the company’s security program across IT and business initiatives. You will provide expert security consulting with a strong emphasis on application security, data protection, and regulatory compliance.

You will develop enterprise security requirements, perform threat analyses, and oversee remediation planning, testing, and incident response.

Qualifikationen

• Bachelor's degree in Information Technology or equivalent required.
• CISSP certification or equivalent highly desirable.
• SANS certifications or equivalent desirable.
• CISA or additional security certifications desirable.
• 20+ years of IT experience with emphasis in Information Security; 12+ years in information security field.
• Leadership experience is a must; management experience a plus.
• Experience in security incident response leadership/IC role.

Aufgaben

• Be accountable as an information security architect for supporting the information security program within IT and business initiatives.
• Provide information security consulting to IT projects with emphasis on application security.
• Develop information security requirements across the enterprise for data, network and application protection and regulatory compliance.
• Conduct threat analysis for systems or applications and plan remediation and testing.
• Conduct research on best practices, emerging technologies and threats in information security.
• Act as SME on security testing, remediation and incident response.

Kenntnisse

Information security architecture

Threat analysis

Application security

Penetration testing

OWASP

Incident response

Encryption / Tokenization

Key management

Access control

Network security

Vulnerability assessment

Windows & UNIX

PCI DSS

Leadership

Ausbildung

Bachelor of Science in Information Technology

CISSP certification

SANS certifications

CISA certification

Jobbeschreibung

Responsibilities

• Be accountable as an information security architect for supporting the information security program within IT and business initiatives.
• Provide Information Security subject matter expertise and security consulting to IT projects and initiatives using information security standards, best practices and approaches, with an emphasis on application security.
• Develop Information Security requirements across the enterprise for data protection, network protection, and application protection and compliance with regulatory requirements for protection of information.
• Conduct threat analysis for systems or applications including analysis of current and known security exposures, planning for remediation of exposures, staged and planned penetration testing, vulnerability assessment and analysis of results.
• Conduct research on best practices, emerging technologies and threats as it relates to Information Security.
• Act as subject matter expert on security related control testing, control remediation and incident response.

Requirements

• Bachelor of Science Degree in Information Technology or equivalent professional experience
• Preferred: CISSP certification or equivalent is highly desirable
• SANS certifications or equivalent are desirable
• CISA or additional security certifications are desirable
• Must have a minimum of 18 - 20 years of work experience in multiple fields of Information Technology with an emphasis on Information Security.
• At least 12 years of this experience should be directly in the Information Security field.
• Leadership experience is a must; management experience is a plus.
• Experience in a leadership / Incident Commander role in security Incident Response processes.
• Extensive knowledge of Security Policy, Standards, Guidelines, and Process Development.
• Detailed knowledge of secure architectures and their design.
• Detailed knowledge of web application development (Java, .Net, Secure configurations).
• Working experience and ability to conduct application / system Penetration Testing / OWASP using industry standard tools.
• Working experience collaborating with development teams to understand and remediate application security vulnerabilities.
• Working experience and ability to conduct network vulnerability testing and remediation.
• Working experience and ability to conduct Threat Analysis.
• Strong knowledge of Virus, Worms and Other Malware (Prevention/Detection) and Incident Response.
• Strong knowledge of Encryption / Tokenization / Key Management.
• Strong knowledge of access control technologies.
• Working knowledge of Intrusion Detection, Firewall Monitoring, System Monitoring.
• Excellent knowledge of Operating systems and platforms (UNIX, Windows, Virtualization, Secure configurations).
• Working knowledge of network security (Routing, switching, TCP/IP, DNS, Architecture, WLAN).
• Working knowledge of state privacy laws and the PCI DSS.
• Ability to work with all levels of personnel within the IT department and departments external to IT, in a dynamic and challenging environment.
• Must consistently maintain a professional demeanor/attitude with all levels of management, employees, customers, and vendors to accomplish organizational goals; take action that respects the needs and contributions of others; take responsibility for actively participating and contributing to team efforts; acts as team facilitator when appropriate.
• Ability to communicate complicated concepts to both management and technical staff and thrive in a cross-functional matrix environment.
• Must be self-motivated and capable of working with minimal supervision and/or direction, and proactively manages their own workload.
• Must be accountable and take direction from supervisor, follow work rules, and keep required work schedules, which include regular and predictable job attendance.
• Well-balanced interpersonal skills are required.

Core Competencies

Demonstrates extensive expertise in Information Security Architecture, including application security, threat analysis, and compliance with regulatory requirements. Proficient in leading security initiatives, conducting vulnerability assessments, and collaborating with cross-functional teams to enhance security posture.