Enterprise Security Architect

Salary starts at $89,358.00 annually. Rate of pay depends on qualifications.

JOB SUMMARY
Works for and under the general direction of the Vice President and Chief Information Officer to design and build enterprise class security systems.  Responsibilities include architecting, design and review of security controls, monitoring of internal/external access controls and security safeguards to protect the confidentiality, integrity and availability of information systems assets. This role will be the subject matter expert in the domain of information security as it relates to servers/workstations, networks, web applications, IT processes and regulatory compliance.  The role will make decisions regarding the security posture of the enterprise in accordance with applicable laws and regulations. Performs evaluation, selection, implementation, and monitors administration of information system security tools across enterprise. Assists in developing and implementing policy and control frameworks, and promoting security awareness and compliance throughout the organization. Provides general direction and leads a staff of two or more security engineers.
 
ESSENTIAL FUNCTIONS

• Researches, designs and advocates new technologies, architectures, and security products that will support business security requirements for the enterprise.
• Conducts threat and vulnerability risk assessments to determine security requirements and proactively fix security flaws and vulnerabilities.
• Plays a lead role in the identification, analysis, evaluation, deployment and optimization of security technologies.
• Maintains oversight of the design, implementation and testing of IT systems to ensure appropriate and effective security controls are built from the start.
• Works closely with other groups; System Administrators, Network Engineering, Applications, SCADA/I&C and other information system staff to ensure adequate security solutions are in place for all IT systems and platforms to sufficiently mitigate identified risks and meet business objectives.
• Leads projects and initiatives to design and verify implementation of various information security controls involved in an organization's risk management.
• Governs security design and architecture during project delivery by enforcing the use of established standards and evolving solutions and patterns.
• Provides security design, consultancy, and assessment services; and introduces improvements in technical security standards and security implementation patterns and designs.
• Conducts analysis of security requirements and controls to identify gaps and provides recommendations of industry best practices, trends, and technology products.
• Manage recovery efforts from security incidents as well as assisting with incident response plans.
• Responsible for raising company-wide security awareness and monitoring information security related web sites and newsletters to stay up to date on current attacks and trends.
• Analyze potential impact of new threats and exploits and communicate risks to relevant business units.
• Provides leadership, project and team-building skills, including the ability to lead teams and drive projects and initiatives in multiple departments.

DECISION MAKING

• This position works under limited supervision. 
• This position serves as a manager, providing guidance and mentorship to engineers and analysts.
• Designs technical solutions and coordinates with the staff to ensure timely and accurate implementation.

MINIMUM REQUIREMENTS

• Bachelor's degree in Information Technology, Computer Science or related field of study required.
• Ten years of relevant IT work experience; minimum of five years in information security field, preferably in an environment certified and compliant with a globally recognized Security Framework / Information Security Management System (NIST SP 800-53, ISO27001, HIPAA, SOX, PCI).
• At least one professional information security certification required; CCNP-Security, CISSP, CISM, CRISC, SANS GIAC.
• Demonstrated ability to identify security requirements and validate implementation of applicable controls into a robust architecture that sufficiently repels most malicious attacks.
• Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects.
• Knowledge in the following: Metasploit, Nessus, digital Forensics tools.
• Knowledge of VB.NET, Java/J2EE, ColdFusion, API/web services, scripting languages (such as Python) and a relational database management system (RDBMS) such as MS SQL Server or Oracle. These are some of the technical elements needed to build security into an organization.
• Valid Class "C" Texas Driver's License as consistent with SAWS Driving Policy.

• Master's Degree in Cybersecurity and Information Assurance.
• CISSP, CISM, & CCNP Certifications.
• Knowledge of SCADA/ICS security controls and best practices.
• Knowledge of Linux/Unix and other open source software to include BIND and Nessus.
• Programming skills in one or more language a plus (Python, Ruby, Bash, PHP, Perl, Java).
• ISO27001 – specifications for a framework of policies and procedures that include all legal, physical and technical controls involved in an organization's risk management.

• Regular contact with internal and external customers and contractor representatives involved with LAN/WAN design, network implementation, and network management.
• May be required to work hours other than regular schedule such as nights, weekends and holidays.