
Information Security Architect, Sr.
SUMMARY: Secures information and data assets across the enterprise in accordance with defined organizational security requirements. Maintains and improves existing security architecture while providing strategic leadership to improve system protection and coverage. Leads the Information Security Architecture Team in developing and refining security standards and procedures. Collaborates within INFOSEC and to external lines of business to optimize the Information Security Program and security services.
ESSENTIAL DUTIES AND RESPONSIBILITIES:
- Collaborates with senior management to align security strategies with business requirements.
- Maintains regular communication with senior management to report on security needs, priorities, recommendations, risks and opportunities.
- Responsible for architectural oversight of all information security systems; contributes to the Information Security Program as well as resulting initiatives and roadmaps.
- Delivers strategic direction as well as technical expertise in information security management, infrastructure architecture and regulatory requirements.
- Leads the assessment of information security risks for vendors, platforms, applications and services for existing and new systems as part of the project initiation process.
- Assumes overall responsibility for establishing and updating internal security requirements, standards, policies and processes; maintains documentation on information security operations and process descriptions.
- Collaborates with business units, IT partners, Enterprise Risk Management and Compliance team members to support, remediate and plan for audit and certification requirements from various regulatory agencies.
- Provides leadership and guidance to the Information Security Architecture Team.
QUALIFICATIONS (Education, Experience, Knowledge, Skills & Ability):
- Bachelor’s or Master’s Degree in computer science, information systems or other related fields with 10 years of in-depth information security experience in infrastructure/network, on-premise applications, cloud-based services and multiplatform environments; or equivalent work and training experience.
- Financial services industry experience preferred.
- 3+ years of expertise in architecture and design of security standards and procedures development, security education, vulnerability assessments, risk analysis and compliance testing.
- Recognized Information Security Certification(s) are required, such as TOGAF, CISSP, CISM, CISA, CRISC, CCSK, CCSP, ITIL, AWS, AZURE, others.
- Knowledge of Compliance and Regulations (ISO, NIST, FFIEC, FDIC and PCI-DSS).
- Must also demonstrate conduct consistently with our Corporate Values.
PHYSICAL DEMANDS - The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.
While performing the duties of this job, the employee is frequently required to stand; sit and talk or hear. The employee is occasionally required to walk; use hands to finger, handle, or feel; reach with hands and arms; climb or balance; stoop, kneel, crouch, or crawl and taste or smell. The employee must occasionally lift and/or move up to 50 pounds. Specific vision abilities required by this job include color vision to identify colored labels, cables, and indicator lights.
Use of computer workstations at desk height and use of server consoles while standing. Installation, removal or termination of cabling, in communications closets and office settings. Occasional use of ladder to reach cables or hardware in ceilings or near top of computer hardware racks. Installation or removal of computer hardware into server racks.
WORK ENVIRONMENT - The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job.
The noise level in the work environment is usually moderate.
This job description is not designated to cover or contain a comprehensive listing of responsibilities, duties or activities that are required of the employee for this job. Responsibilities, duties and activities may change at any time with or without notice. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
At OnPoint, we believe a workplace that reflects the richness of the world fosters a welcoming and empowering environment for everyone. We're committed to equity and inclusion, and consider all qualified applicants embracing every race, religion, color, sex, national origin, age, sexual orientation, gender identity, disability or veteran status, and your unique background.
We encourage you to apply if you're passionate about this opportunity and have the core qualifications. Your unique experiences and skills are what make you a strong candidate. Don’t let imposter syndrome hold you back! Our recruitment process is designed to be inclusive and accessible to all. If you need any accommodations during the application or interview stage, please let us know. We're dedicated to providing what's necessary to ensure a fair and inclusive experience.
#LI-Hybrid
JobFamily
Technology
JobFunction
Technology
PayType
Salary