Information Security Architect II (2026-1041)
Valley Medical Center & Clinics
A complete application in a minute
Tailored resume and cover letter, ready to send.
Job summary
Valley Medical Center & Clinics in Renton, WA seeks an Information Security Architect II to protect the confidentiality, integrity, and availability of clinical and administrative systems. The role ensures HIPAA/PCI-DSS compliance while aligning with HITRUST, NIST, and ISO 27000 frameworks.
The successful candidate will monitor security solutions, lead risk assessments, manage SIEM/SOC activities, and guide policy, training, and change management.
Qualifications
- Master's degree in computer science related field plus two (2) years industry related experience.
- Bachelor's degree in computer science related field plus three (3) years industry related experience.
- Associate's degree in computer science related field plus four (4) years industry related experience.
- Five (5) years industry related experience.
- Intermediate-level information security certification from a cybersecurity industry standard (e.g., (ISC)2, OffSec, EC-Council, GIAC, CompTIA). Current certification required.
Responsibilities
- Monitor all security solutions, investigate alerts, and respond to threats/incidents.
- Monitor the ticket queue and provide first-tier support.
- Provide IT policy guidance and security training.
- Configure and operate security tools (firewalls, AV, SIEM, SEG, PKI).
- Conduct internal risk assessments and patch management.
- Research and implement security improvements and address non-compliance with standards.
Skills
Education
Tools
Job description
Job Title: Information Security Architect II
Req: 2026-1041
Location: VMC Main Campus
Department: Cyber Security Services
Shift: Days
Type: Full Time
FTE: 1
City State: Renton, WA
Category Professional ( NCNM)
Salary Range: Min $94,894 - Max $142,341/annual DOE
JOB DESCRIPTION
The position description is a guide to the critical duties and essential functions of the job, not an all-inclusive list of responsibilities, qualifications, physical demands, and work environment conditions. Position descriptions are reviewed and revised to meet the changing needs of the organization.
TITLE: Information Security Architect II
JOB OVERVIEW: Responsible for ensuring the confidentiality, integrity, and availability (CIA) of VMC computer systems and information to safeguard personnel and patient safety, while also maintaining compliance with HIPAA, PCI-DSS, cybersecurity industry best practices, frameworks, and standards.
DEPARTMENT: Informational Technology
WORK HOURS: Typically, Monday - Friday; Hours may vary to meet departmental needs.
REPORTS TO: Supervisor, Information Security
Education: Master's degree in computer science related field plus two (2) years industry related experience, OR Bachelor's degree in computer science related field plus three (3) years industry related experience, OR Associate's degree in computer science related field plus four (4) years industry related experience, OR five (5) years industry related experience.
Certification: Intermediate-level information security certification from a cybersecurity industry standard such as (ISC)2, OffSec, EC-Council, GIAC, CompTIA, and other related certifications on approval. Current certification required.
Information Security Background: Industry experience preferred as a Cybersecurity Practitioner, Security Operations Center (SOC) Analyst, Risk Assessment Auditor, Penetration Tester, Incident Response Handler, or Computer Forensics Investigator. Experience as a Systems Administrator or Network Engineer to be considered up to three (3) years as time towards.
- Working knowledge with scripting languages and automation such as Python, PowerShell, etc.
- Working knowledge with securing cloud computing and cloud services such as Azure and AWS.
- Working knowledge with securing operating system environments such as Windows, Mac, Linux, etc.
- Working knowledge with securing networking, wireless and virtual environments.
- Working knowledge with subnetting, segmentation, and zero-trust zones.
- Professional experience with PKI/certificate authority and OpenSSL.
- Professional experience with SEG, NGFW, AV and EDR.
- Professional experience with various SIEMs and SOC management.
- Professional experience with multi factor authentication implementation.
- Familiarity with security compliance standards such as HIPAA, PCI-DSS, GDPR, etc.
- Familiarity with security frameworks such as HITRUST, NIST, OWASP, ISO 27000, SANS CIS 20, STIGs, ITIL, etc.
- Familiarity with the full stack OSI model, as well as TCP/IP protocol suite.
- Familiarity with vulnerability management and patch cycles.
- Familiarity with risk assessments, pen-tests, table-top exercises, BCDR, and change management.
- Familiarity with writing and implementing IT policy, CSIRT plans, and training & awareness programs.
- Requires ability to move items and equipment weighing up to 70 lbs.
- Requires ability to appropriately manage and handle highly confidential information.
- Requires ability to remain focused, self-motivated, and initiative-taking while working independently or on a team, regardless of working onsite or remotely with little to no instruction.
- Requires planning, organizing, and working on multiple tasks at one time with tight time constraints.
- Requires ability to identify the most important tasks and prioritize accordingly.
- Requires ability to implement a logical and structured approach to time management.
- Requires ability to demonstrate a high level of professionalism and show respect to all co-workers, patients, business partners, and members of the public.
- Requires ability to demonstrate a strong collaborative mindset, share knowledge, and function as a contributing member of the team.
- Requires ability to work effectively with all levels of the organization and broad technical understanding, while providing excellent customer service.
- Requires ability to demonstrate a high level of communication skills, both verbal (meeting organizer, training, etc.) and written (E-mail, IT policy, documentation, etc.) to C-level executives, auditors, end users, and engineers.
- Requires ability to quickly learn, conduct own research as necessary, and retain information.
- Requires ability to quickly understand information systems to identify and validate security requirements.
- Requires ability to stay up to date on all current cybersecurity events and zero-day exploitations.
- Requires ability to demonstrate strong critical-thinking and problem-solving skills.
- Requires ability to demonstrate acute attention to detail.
- Monitor all security solutions, investigate all alerts, and respond appropriately to all identified threats, incidents, and/or compromise.
- Monitor the ticket queue, attempt first tier support, and elevate as needed.
- Provide excellent customer service.
- Assist staff with access related issues.
- Provide certificate assistance to other teams as needed.
- Document all team related procedures and resources to include notes, training, templates, knowledge bases, databases, change control and SOPs.
- Perform performance maintenance and patch management on all security tools and databases.
- Provide IT policy guidance to assist staff with security compliance.
- Assist and take instruction from higher-level analysts with duties and responsibilities as assigned.
- Configure, manage, and operate all security tools to include firewalls, AV, SIEMs, SEG, PKI, etc.
- Conduct internal risk assessments.
- Research, recommend, and implement changes to procedures, systems, or infrastructure to enhance security and/or address non-compliance with information security standards.
- Review and recommend updates all team related procedures and resources to include notes, training, templates, knowledge bases, databases, change control and SOPs.
- Research and recommend patching for known threats and zero-day vulnerabilities.
- Research new technology requests and recommend appropriate security guidance.
- Provide security training and implement awareness campaigns to help educate staff.
- Assist and provide guidance to lower-level analysts with assigned duties and responsibilities.
- Assist and take instruction from senior-level analysts and supervisor with duties and responsibilities as assigned.
Reviewed: 01/20
Revised: 12/23
Grade: NC11
FLSA: E
CC: 8552
- Working knowledge with scripting languages and automation such as Python, PowerShell, etc.
- Working knowledge with securing cloud computing and cloud services such as Azure and AWS.
- Working knowledge with securing operating system environments such as Windows, Mac, Linux, etc.
- Working knowledge with securing networking, wireless and virtual environments.
- Working knowledge with subnetting, segmentation, and zero-trust zones.
- Professional experience with PKI/certificate authority and OpenSSL.
- Professional experience with SEG, NGFW, AV and EDR.
- Professional experience with various SIEMs and SOC management.
- Professional experience with multi factor authentication implementation.
- Familiarity with security compliance standards such as HIPAA, PCI-DSS, GDPR, etc.
- Familiarity with security frameworks such as HITRUST, NIST, OWASP, ISO 27000, SANS CIS 20, STIGs, ITIL, etc.
- Familiarity with the full stack OSI model, as well as TCP/IP protocol suite.
- Familiarity with vulnerability management and patch cycles.
- Familiarity with risk assessments, pen-tests, table-top exercises, BCDR, and change management.
- Familiarity with writing and implementing IT policy, CSIRT plans, and training & awareness programs.
- Working knowledge with scripting languages and automation such as Python, PowerShell, etc.
- Working knowledge with securing cloud computing and cloud services such as Azure and AWS.
- Working knowledge with securing operating system environments such as Windows, Mac, Linux, etc.
- Working knowledge with securing networking, wireless and virtual environments.
- Working knowledge with subnetting, segmentation, and zero-trust zones.
- Professional experience with PKI/certificate authority and OpenSSL.
- Professional experience with SEG, NGFW, AV and EDR.
- Professional experience with various SIEMs and SOC management.
- Professional experience with multi factor authentication implementation.
- Familiarity with security compliance standards such as HIPAA, PCI-DSS, GDPR, etc.
- Familiarity with security frameworks such as HITRUST, NIST, OWASP, ISO 27000, SANS CIS 20, STIGs, ITIL, etc.
- Familiarity with the full stack OSI model, as well as TCP/IP protocol suite.
- Familiarity with vulnerability management and patch cycles.
- Familiarity with risk assessments, pen-tests, table-top exercises, BCDR, and change management.
- Familiarity with writing and implementing IT policy, CSIRT plans, and training & awareness programs.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
