Cybersecurity Risk Lead

Camden National Corporation; Gardiner (ME); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Robust medical, dental, and vision insurance

Generous time off including paid holidays

401(k) retirement savings plan

Tuition reimbursement

Job summary

Camden National Corporation is seeking a Cybersecurity Architect responsible for developing long-term cybersecurity strategies and frameworks to enhance the bank's information security posture. This role involves aligning security architecture with regulatory requirements and providing technical leadership to implement a robust security strategy.

The ideal candidate has over 7 years of experience and a Bachelor's degree in a related field, with skills in risk management and working within regulated environments. A comprehensive total rewards package, including generous time off and professional development opportunities, is offered.

Qualifications

• 7+ years of related work experience.
• Experience with IT in regulated environments.
• Basic proficiency in scripting languages like Python and PowerShell.

Responsibilities

• Align enterprise security architecture with regulatory frameworks.
• Analyze security controls in IT system lifecycle.
• Conduct architecture risk assessments and threat modeling.

Skills

Cybersecurity frameworks

Firewalls

SIEM/SOAR

Scripting languages (Python, PowerShell)

Risk Management

Education

Bachelor's degree in Computer Science, Information Systems, or Cybersecurity

Tools

Vulnerability Management

Data Loss Prevention

Job description

## Cybersecurity ArchitectApplyremote type: Hybrid (Remote/Office)locations: ME, Gardiner, 190 Water St: ME, Portland, 2 Canal Plaza 220 Middle Street: ME, Camden, 2 Elm St: ME, Auburn, 178 Court St: NH, Berlin, 9 Main Sttime type: Full timeposted on: Posted 2 Days Agojob requisition id: R2467# Live here. Play here. Bank here. *Work here.*## If you’re looking to build your career at a forward-thinking organization with deep community roots and a vision for growth, success, and giving back, you’ve come to the right place.# **Get to know us:*** We’re your local community bank—and have been since 1875—that is committed to providing **excellent customer service** and **giving back** to our communities.* We foster a **collaborative, inclusive** work environment as part of a close-knit team where your **voice is valued** and heard.* Our **highly engaged employees** are rewarded for their performance and have ample opportunities for cross-training and **advancement within the organization**.* We’ve been named one of the **best places to work in Maine**, and offer **robust benefits** focused on your holistic well-being.**\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_****Position Summary:**The Cybersecurity Architect will be responsible for providing secure solutions and services which provide defense in depth for Camden’s enterprise computing systems. The Cybersecurity Architect will develop long-term cyber security strategies and roadmaps, using security frameworks to strengthen the Bank’s overall information security posture. In addition, this role will be a key contributor in the development of the bank’s security architecture and partner with our business and technology partners.**Essential Duties and Responsibilities:*** Align enterprise security architecture with applicable regulatory and industry frameworks including NIST CSF, SOX, and GLBA requirements* Participate in security reviews of vendor technologies, SaaS solutions, and integrations* Analyze and recommend security controls and procedures in the acquisition, development, and change management lifecycle of information systems* Use industry standard security architecture frameworks to ensure security controls are well integrated and meet the quality attributes of confidentiality, integrity, and availability* Provide technical security leadership to evolve the organization’s Zero Trust security architecture strategy across cloud, identity, endpoint, and network domains* Support and develop security standards and governance controls for enterprise AI platforms, generative AI integrations, and machine learning-enabled business solutions.* Partner directly with technology and business stakeholders on the identification, development and review of enterprise security standards* Coach and mentor teams to incorporate security into enterprise and customer-facing applications* Contribute to and advance the organization’s security strategy and product roadmap* Identify and communicate current and emerging threats to the organization* Protect the company’s information assets using a variety of technological and security controls* Respond to all system and network security breaches* Assist in complex security control analysis and enterprise security design problem solving* Conduct architecture risk assessments and threat modeling using frameworks such as STRIDE, MITRE ATT&CK, or attack path analysis**Basic Qualifications***:** Bachelor’s degree in Computer Science, Information Systems, or Cybersecurity* 7 or more years of related work experience* Experience with development, implementation, operation, and testing of Information Technology within regulated environments* Experience with firewalls, SIEM/SOAR, e-mail security, incident response, vulnerability management, and Data Loss Prevention* Basic proficiency in scripting languages such as Python and Powershell**Preferred Qualifications:*** CISSP, CCSP, or GDSA* Risk management experience* Experience with SASE/SSE and ZNTA architecture* Understanding of securing AI tools, AI integrations, and AI oversight* Background in securing and developing API Integrations* Prior experience working in a regulated environment* Broad infrastructure and enterprise technology experience preferred**Skills and Abilities:*** Ability to manage multiple tasks and work in a fast-paced environment* Ability to communicate complex security concepts to technical and non-technical stakeholders, including leadership and business partners* Technical writing* Project Management* Team player***The statements contained herein reflect general details as necessary to describe the principle functions for this job, the level of knowledge and skill typically required, and the scope of responsibility, but should not be considered an all-inclusive listing of work requirements. Individuals may perform other duties as assigned, including work in other functional areas to cover absences or to equalize peak work periods to balance workloads.***# **\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_**# ***Our comprehensive total rewards package offers something for everyone!**** Robust medical, dental, and vision insurance packages* Generous time off, including paid federal holidays and paid day off for your birthday* 401(k) retirement savings plan* Tuition reimbursement, professional development, and career growth opportunities* Employee assistance program* Comprehensive wellness program**Pursue** a career at Camden National Bank and **apply today**. We can't wait to hear from you!