Details
Posted: 11-May-22
Location: New York, New York
Type: Full Time
Salary: Open
Internal Number: 14853031
Overview Principal - Security Architect
Working under the supervision of the Information Security Division (ISD) Architecture - Permit to Operate (PTO) Manager, the role of Principal Security Architect is to support the design and implementation of enterprise security controls for applications that are deploying changes to production, and lead initiatives in support of delivery toll gate processes, metrics and automation.
Employee Duties & Responsibilities - Participate in delivery program toll gate processes such as Permit to Design (PTD), Permit to Build (PTB) and Permit to Operate (PTO).
- Perform security assessments and control verification for applications requesting permission to deploy Production changes
- Lead the adoption and integration efforts for new controls into the PTO workflow and approval process. Coordinate integration initiatives.
- Identify appropriate artifacts and evidence that demonstrates compliance with security requirements and ensures control satisfaction.
- Work closely with application teams ("our customers") across numerous lines of business to effectively guide them through security requirements.
- Assist in ensuring application compliance with bank and regulatory standards.
- Evaluate Architecture Design requirements against the applicable security control requirements and identify gaps and remediation options. Document findings.
- Develop metrics to measure progress and effectiveness across the security control landscape.
- Establish strong working relationships and effective communications across various organizational groups, inside and outside of security. Coordinate meetings with engineering and application teams.
- Research information and train within the Security Architecture and Control Assessment disciplines.
Abilities - Supervise the work of junior security architects and security analysts.
- Ability to clearly document security requirements.
- Working knowledge of cyber security, security architecture principles, and Information Technology.
- Assist with all phases of technology enhancements: identify, assess, evaluate, design, build, implement, integrate, automate and operationalize.
- Understanding of public cloud technologies, shared responsibility model for cloud, and experience implementing or assessing cloud security controls.
- Ability to organize many types of documents and meetings on a daily basis, identify and breakdown complex problems and review related information to develop and evaluate options and implement solutions; effectively communicating all phases to vastly different audiences
- Manage own time and coordinate the time of others.
- Ability to listen, understand, and collect information presented through presentations or verbal meetings.
Requirements :
- 7-10+ years of work experience in cyber security
- Working knowledge of IT control frameworks such as ITIL, NIST 800-53, ISO 27000
- Ability to get a Position of Public Trust Clearance. US citizenship and living in the US.
- Experience in global Financial Services security is preferred
- Certification in one or more of the following is a plus: CISSP, CISA, CISM, CCSK, CCSP, GCP Security Engineer, Azure Security Engineer, or similar.
