Senior Information Security Architect

Mass General Brigham (Enterprise Services); Somerville (MA); Hybrid; USD 94,000 - 137,000; Full time

Benefits offered by this job

Hybrid work model

Onsite at 399 Revolution Drive

40-hour workweek

Job summary

Mass General Brigham is seeking an Information Security Engineer III to serve as a senior leader within the Digital Information Security Architecture team. In this role, you will evaluate a wide variety of technologies, business initiatives, operational processes, and strategic projects to identify security risks and provide practical, risk-based guidance.

Working closely with technical teams, business stakeholders, vendors, and security professionals, you will help ensure that security

Qualifications

• Bachelor's degree in Computer Science or a related field required; equivalent experience may be accepted in lieu of a degree.
• 5-7 years of experience as a systems engineer, security engineer, security architect, cybersecurity consultant, or in a related role.
• Strong understanding of cybersecurity principles, risk management concepts, and industry-standard security frameworks.
• Experience performing security assessments, architecture reviews, risk analyses, technology evaluations, or similar analytical activities.

Responsibilities

• Analyze technologies, business initiatives, operational processes, and proposed solutions to identify security risks and provide practical, risk-based guidance that supports informed decision making.
• Quickly assess unfamiliar technologies, platforms, and business challenges, develop an understanding of their security implications, and translate that understanding into actionable recommendations.
• Apply cybersecurity principles, industry frameworks, organizational standards, and professional analyses to evaluate complex situations and recommend appropriate security controls, safeguards, or courses of action.
• Collaborate with technical teams, business stakeholders, vendors, project leaders, and security professionals to address security concerns and help ensure that security considerations are incorporated into decision-making processes.
• Research emerging technologies, evolving threats, regulatory requirements, and industry practices to determine their relevance and potential impact on the organization.
• Perform security reviews, architectural evaluations, and other analytical activities to identify weaknesses, opportunities for improvement, and areas requiring additional safeguards or oversight.
• Develop clear, concise, and well-reasoned security guidance, recommendations, assessments, standards, reports, and other written deliverables that enable stakeholders to make informed business and technology decisions.
• Communicate complex technical concepts, risks, trade-offs, and recommendations effectively to audiences ranging from engineers and project teams to business leaders and executive stakeholders.
• Present findings, facilitate discussions, answer questions, and build consensus among stakeholders by explaining security concerns and recommended approaches in a clear, practical, and persuasive manner.
• Serve as a trusted advisor by helping stakeholders understand cybersecurity risks, evaluate available options, and make balanced decisions that align with organizational objectives and risk tolerance.
• Exercise independent judgment in situations that may involve incomplete information, competing priorities, evolving technologies, or ambiguous requirements.
• Contribute to the development and continuous improvement of security standards, methodologies, assessment approaches, and best practices that strengthen the organization's overall security posture.
• Mentor junior and mid-level team members by sharing technical knowledge, analytical approaches, communication skills, and professional expertise.

Skills

Security engineering

Risk management

Threat modeling

Zero Trust concepts

Communication skills

Mentoring

Education

Bachelor's degree in Computer Science or related field

Tools

AWS

Azure

GCP

IAM

Job description

Mass General Brigham is seeking an Information Security Engineer III to serve as a senior leader within the Digital Information Security Architecture team. In this role, you will evaluate a wide variety of technologies, business initiatives, operational processes, and strategic projects to identify security risks and provide practical, risk-based guidance.

Working closely with technical teams, business stakeholders, vendors, and security professionals, you will help ensure that security