Information Security Architect

Information security Architect Remote 6+ months Required Skills : Architect, Security Job Description : Security Architecture is essential to "shifting left" the technology development at the Bank. Reviewing Banking industry standards and Bank policy ensures products arrive at production with security built in. The architect with lead technical conversations to determine scope of controls by evaluating standards and policies, and write requirements with threat modeling in mind to assist engineers with building securely. The architect will meet with stakeholders and determine criticality of controls and work with application owners to create automations to validate compliance.

Collaborates with technical and business stakeholders to address Information Security risks while achieving business objectives, meeting regulatory requirements, and addressing emerging threats. Responsible for providing expertise and support on decisions and priorities regarding the enterprise's overall Information Security strategy and posture.

Responsible and accountable for risk by openly exchanging ideas and opinions, elevating concerns, and personally following policies and procedures as defined. Accountable for always doing the right thing for customers and colleagues, and ensures that actions and behaviors drive a positive customer experience. While operating within the Bank's risk appetite, achieves results by consistently identifying, assessing, managing, monitoring, and reporting risks of all types.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

Provides expert technical insight and industry perspective in the creation, delivery, and integration of complex and comprehensive security solutions. Acts as an internal consultant, advocate, mentor, and change agent. Viewed as an Information Security expert and critical technical resources across multiple technical areas and business segments. Partners with other groups to ensure solid, cross-functional decisions are made as a team. Maintains and demonstrates a strong understanding of enterprise systems, policies, standards, regulatory requirements, and business drivers. Represents Information Security at enterprise review meetings (ITAC, NPI Reviews, Production Readiness, etc.). Adheres to and promotes compliance to Information Security policies, standards and best practices. Leads process improvement and risk mitigation initiatives. Coaches and mentors more junior staff.