Senior Security Architect

Acro Service Corp; Quincy (MA); Hybrid; USD 90,000 - 140,000; Full time

Job summary

Acro Service Corp. is seeking a security operations professional to provide robust end-user security support and policy implementation in a hybrid Boston/Quincy environment.

The role emphasizes IAM/RBAC, risk assessment, and adherence to ISO/NIST frameworks while coordinating with stakeholders across business units. The successful candidate will bring strong communication skills and experience with cloud security, encryption, and security tooling to strengthen enterprise defenses and ensure

Qualifications

• Bachelor's degree or equivalent in audit, compliance and security risk management.
• Minimum of five years of IT implementation and operational experience across development, audit compliance, security risk and cloud solutions.

Skills

Operational security

JIRA

IAM & RBAC

Cloud security

Data security

Encryption

Security policies

Risk assessment

Security audits

Education

Bachelor's degree in CS / related

Equivalent experience in audit & security

Tools

WorkDay

WorkDay Prism

Microsoft security tools

Snowflake security

Job description

Locals in Boston or Quincy area to work on Hybrid schedule.

Required Skills

• Extensive experience providing operational security support to end users
• Experience working with modern issue tracking systems (JIRA)
• Understanding of enterprise security best practices, including but not limited to IAM, RBAC, Network Security, SaaS, Cloud Security, Data Security, Encryption, and File transfer management.
• In depth exposure to defining and implementing end user security protocols in a large public or private sector entity comparable in size to the Commonwealth.
• Exposure to technical configurations, technologies, and processing environments in one or more projects of similar size and complexity to BEST.
• Understanding of information risk concepts and principles as a means of relating business needs to security controls.
• Experience with common information security management frameworks, such as [International Organization for Standardization (ISO) 2700x and the ITIL, COBIT and National Institute of Standards and Technology (NIST)] frameworks.
• In-depth knowledge of risk assessment methods and technologies.
• Understanding of Human Resource and Payroll systems security requirements.
• Excellent technical knowledge of mainstream operating systems and a wide range of security technologies, such as network security appliances, identity, and access management (IAM) systems, anti-malware solutions, automated policy compliance tools, and desktop security tools.
• More than 3 years of experience in developing, documenting, and maintaining security policies, processes, procedures, and standards.
• Knowledge of network infrastructure, including routers, switches, firewalls, and the associated network protocols and concepts.
• Strong analytical skills to analyze security requirements and relate them to appropriate security controls.
• Ability to interact with personnel at all levels and across all business units and organizations, and to comprehend business imperatives.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Experience with Software-as-a-Service cloud implementations particularly those in which legacy on premise applications have been migrated to cloud delivery options.
• Demonstrated operational security support experience in a Software as a Service (SaaS) solution.
• Experience with WorkDay Human Resource and Payroll solution.
• Experience with WorkDay Prism data and reporting solution.
• Experience with WorkDay user security management as a member of a business (non-IT) team.
• Experience in transitioning traditional IT security functions to business teams.
• Exposure to operating end user security protocols, policies, and other in a large public or private sector entity comparable in size to the Commonwealth.
• Audit, compliance, or governance experience is preferred.
• Experience with Audit, compliance, or governance actions.
• Experience with Microsoft security tools and functions
• Experience with Snowflake security functions

Minimum Entrance Requirements

• Bachelor's degree in computer science, system analysis or a related study, or equivalent experience in the field of audit compliance and security risk and compliance management.
• Minimum of five years of implementation and operational experience in IT, with a knowledge in the following technical disciplines: application development, audit compliance, database management, infrastructure and network design, security risk and compliance management, and cloud solutions.