Strategic Information Security Architect

Capital District Physicians Health Plan Inc; City of Rochester (NY); On-site; USD 88,000 - 198,000; Full time

Job summary

Capital District Physicians Health Plan Inc. is seeking an Information Security Architect to help develop and execute the organization’s information security risk management strategy.

The role provides technical expertise to the Security Group and acts as a trusted security advisor to business and IT leadership. The position involves advising on protection of information assets, aligning security architecture with business strategy, and supporting security management across the organization and

Qualifications

• Five (5) years of experience in an Information Technology Security Role.
• Bachelor's degree in computer science, information technology or relevant field; in lieu of a degree, six (6) additional years of experience.
• Exceptional communication and influencing skills with strong ability to balance differing stakeholder interests.
• Experience with enterprise security components such as IAM, AD/LDAP, MFA, firewall, and data loss prevention.
• Familiarity with regulatory standards (SOX, HIPAA, PCI/DSS, ISO27001, NIST).

Responsibilities

• Participates in development and implementation of security architecture principles and standards.
• Drives adoption and compliance of security standards across teams.
• Creates functional and technical security requirements throughout the project lifecycle.
• Executes risk management strategy with stakeholders, including disaster recovery and business continuity planning.
• Performs risk-based assessments of solutions and vendors for security controls.

Skills

Security architecture

Risk management

Vendor management

Regulatory knowledge

Security consultation

Education

Bachelor's degree in computer science or information technology

Tools

AD/LDAP

MFA

Firewall design

SIEM

Job description

Capital District Physicians Health Plan Inc. is seeking an Information Security Architect to help develop and execute the organization’s information security risk management strategy.

The role provides technical expertise to the Security Group and acts as a trusted security advisor to business and IT leadership. The position involves advising on protection of information assets, aligning security architecture with business strategy, and supporting security management across the organization and