Senior Information Security Architect & Risk Leader

Capital District Physicians’ Health Plan, Inc.; City of Rochester (NY); Hybride; USD 88 000 - 198 000; Plein temps

Résumé du poste

Capital District Physicians’ Health Plan, Inc. is seeking an Information Security Architect to develop and execute the enterprise risk management strategy.

The role provides technical leadership, advises leadership, and ensures secure, cost‑effective infrastructure and application design across the organization. You will advise on security controls, perform risk assessments, and collaborate with IT and business leaders to align security with business objectives.

Qualifications

• Five (5) years of experience in an Information Technology Security Role.
• Strong ability to balance stakeholder interests through analysis and persuasion.
• Experience with security architecture principles and standards across org.
• Familiarity with regulatory standards (SOX, HIPAA, PCI-DSS) preferred.

Responsabilités

• Develop and implement security architecture principles and standards aligned to the organization's strategy.
• Drive adoption and compliance of security standards across development and infrastructure teams.
• Create functional and technical security requirements and oversee project lifecycles.
• Lead overall risk management strategy with key stakeholders and ensure DR/BC plans.
• Perform risk-based assessments of solutions and vendors for proper controls.
• Provide security consultations (design reviews, recommendations) for projects.

Connaissances

Security architecture

Risk management

Stakeholder collaboration

Communication skills

Ability to influence

Formation

Bachelor's degree in CS/IT

Security certification (CISSP/CISA/CISM/SANS) preferred

Outils

Identity and access management (IAM)

Active Directory/LDAP

Multi-factor authentication

Network security

Application security

PKI

Data loss prevention (DLP)

IDS/IPS

Cloud security controls

Firewall design

Description du poste

Capital District Physicians’ Health Plan, Inc. is seeking an Information Security Architect to develop and execute the enterprise risk management strategy.

The role provides technical leadership, advises leadership, and ensures secure, cost‑effective infrastructure and application design across the organization. You will advise on security controls, perform risk assessments, and collaborate with IT and business leaders to align security with business objectives.