Information Security Architect (Remote)

MedStar Health; Raleigh (NC); Remote; USD 143,000 - 185,000; Full time

Job summary

A leading healthcare organization seeks a Security Architect for a remote role, responsible for developing security strategies, assessing risks, and advising on IT security measures. The ideal candidate will have substantial experience in information security and architecture, with a focus on enhancing security across the organization.

Qualifications

• 8+ years of experience in Information Technology, specifically in Information Security.
• 4+ years providing architecture/security expertise in large enterprises.
• Advanced Security Certifications preferred.

Responsibilities

• Design and implement security strategies for assigned domains.
• Review architectures to identify security gaps and recommend enhancements.
• Serve as an Information Security expert, advising stakeholders.

Skills

Security Strategy

Threat Modeling

Effective Communication

Analytical Skills

Interpersonal Skills

Education

Bachelor's Degree in Information Technology

High School Diploma or GED

Tools

Security Frameworks (NIST, COBIT)

Architectural Frameworks (TOGAF)

Cyber-Attack Taxonomies

Job description

Overview

This is a remote role that may be hired in several markets across the United States.

**Remote with ability to travel to Raleigh, North Carolina, Phoenix, Arizona or Morristown, New Jersey, on an as needed basis.

This position is responsible for delivering architecture intent to enterprise stakeholders and the Information Security organization at-large, that ensures the secure realization of business initiatives in a manner consistent with the Bank's current and future risk appetite.

Responsibilities

• • Security Strategy: assists in designing and implementing security strategies for assigned subject matter domain (e.g., Identity and Access Management, Compute) and Information Security, at-large based on knowledge of the assigned-domain; bank policies and standards; current, and anticipated, regulatory requirements; and expected threats and associated risks.
  • Security Architecture: review existing and proposed architectures, identify security gaps - through threat modeling and/or technical risk assessment, and recommend changes and/or enhancements. Continuously enhance process(es) to drive scale, consistency, repeatability, to this end.
  • Solutions Architecture: as required, function as a solutions architect for security solutions; provide the initial solutions architecture, assist with foundational integrations, and lead the initial implementation of solutions
  • Business Support: serve as an Information Security subject matter expert, providing advisory and consulting services to stakeholders, as required. To this end, effectively communicate to technical and nontechnical audiences alike in both oral and written form.
  • Continuous Education: maintains a strong knowledge of developments in information technology, developments in security technology, and emerging security threats. Utilizes knowledge to influence security strategy - e.g., identity technology capabilities needed to address threats; establish secure design patterns for emergent technologies

Qualifications

Bachelor's Degree and 8 years of experience in Information Technology including Information Security OR High School Diploma or GED and 12 years of experience in Information Technology including Information Security

Preferred Qualifications:

• 4+ years of providing architecture and/or security architecture subject matter expertise in a large-scale enterprise environment

• Demonstrable experience with threat modelling (e.g., PASTA, STRIDE, DREAD) and technical risk assessment in an enterprise environment

• Familiarity with one of more Industry-standard security framework - e.g., NIST RMF, NIST CSF, COBIT, ISO, CIS, CSA CCM

• Familiarity with one of more Industry-standard architectural framework - e.g., TOGAF, DODAF, Zachman

• Familiarity with one of more cyber-attack taxonomy (e.g., CAPEC, ATT&CK)

• Advanced Security Certifications, such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) are highly desirable.

• Experience with scripting and/or programming

• Effective communicator, capable of effectively translating and presenting complex technical concepts to both technical and non-technical management and customers, through oral presentations and written media (white papers and demonstrations)

• Exceptional interpersonal skills and a collaborative spirit that enables you to work effectively with stakeholders at all levels, agnostic of background

• Strategic planning and execution, with a talent for turning complex challenges into actionable solutions.

• Strong analytical skills with high attention to detail and accuracy with the ability to use data-driven metrics to communicate change and risk reduction.

• Large Financial Institution (LFI) experience

This job posting is expected to remain active for 3 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants.

The base pay for this position is generally between $143,000 and $185,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.