The Enterprise Security Architect will report to the Executive Director of Enterprise Architecture and Shaping with dotted line responsibility to the Chief Information Security Officer. The Enterprise Security Architect will work closely with enterprise architects, other functional area architects and security specialists to ensure adequate security solutions are in place across all IT systems and platforms to meet data protection requirements, business objectives, regulatory requirements and information risk objectives. This includes developing and maintaining standards and procedures for enterprise-wide information and IT system security, Identity and Access Management (IAM) and network security. The Enterprise Security Architect will define the requirements and architecture for IAM and assist in performing IT risk assessments on security, infrastructure, application development and configuration.

Responsibilities:

• Defining, implementing, and maintaining enterprise security architecture standards and processes across access management, threat management, data protection, cryptography, disaster recovery, software systems, and risk management domains.
• Defining, implementing, and maintaining enterprise-wide Identity and Access Management (IAM) standards.
• Defining, implementing, and maintaining network security standards.
• Supporting the it risk assessments on security, infrastructure, application development and application configuration.
• Experience in defining Secure Software Development Lifecyle development requirements and methodologies.
• Researches, designs and promotes new technologies, architectures, and security products that will support security requirements for the enterprise and its customers, business partners and vendors.
• Directly contributes to the maintenance and improvement of the information security strategy and risk management objectives.
• Measures the effectiveness of current security architectures and driving process improvement into the program.
• Supports policy development and implementation.
• Evangelizes security and risk management across the enterprise.

• Ability to work effectively across the organization with other teams, such as enterprise architects, functional analysts, application developers, system operations, infrastructure, auditors, security personnel, etc.
• Self-starter with energy and desire to drive positive change across the IT organization.
• Analytical demeanor, strong decision making skills and the ability to effectively communicate with individuals across all levels the organization.
• Demonstrated experience working across a geographically and culturally diverse organization.
• Expert knowledge of security issues, techniques and implications across common computing systems.
• Experience in applying an enterprise architecture methodology (e.g. Zachman, TOGAF and Gartner).
• Knowledge of a security-specific architecture methodology (e.g. TOGAF O-ISM3 SABSA).
• Proven ability in security process.
• Working knowledge design and application of compliance frameworks and security management standards (e.g., ISO 2700x, COBIT, and NIST).
• Working knowledge of network security concepts and strategies.
• Working knowledge of identity and access management concepts and strategies.
• Working knowledge of IT general controls and their application.
• A solid technical foundation in the delivery of enabling technologies and enterprise applications.
• Ability to manage multiple priorities while multitasking effectively and dealing with ambiguity.
• Ability to design, evaluate and document processes and lead teams in accomplishing process review and improvement.

Required Qualifications:

• Bachelor’s degree in Computer Science, Information Security and Risk Management, Information Systems, Engineering or related experience
• CISSP, applicable GIAC, Open CA, CCNA, GSEC, MCSA certifications preferred
• Experience in SAP security a strong plus
• Minimum 4-5 years demonstrated experience in Information Security and Risk Management delivery with 2-3 years of Security Architecture work across a global organization.
• Minimum 4-5 years’ experience in an IT operations role with experience in delivering security projects.

We are an equal opportunity employer. Employment selection and related decisions are made without regard to gender, race, age, disability, religion, national origin, color, gender identity, sexual orientation, veteran status or any other protected class.