Information Security Architect

Location: St. Louis, Missouri
Date Posted: 01-07-2014

Security Architect will work with stakeholders (both leadership and subject matter experts) to build a holistic and strategic view of the organization's information technology assets, applications, data/information assets, related processes, and information security requirements. This position will link the strategy and processes of the organization to the security strategy, initiatives, and technology selections. This is an expert/lead technical role, and will define the information security architecture and design for the enterprise. You must possess exceptional interpersonal and leadership skills (collaboration, facilitation, and negotiation), strong conceptual thinking, and communication skills (written and verbal). Must have strong business acumen, with experience in understanding and shaping technology investments in support of company strategy.

Role Overview:

•Provide security expertise and thought leadership throughout the organization with an emphasis on enterprise security.
•Develop strategic and detailed technical roadmaps of the enterprise security environments and the associated technologies required to deliver these solutions.
•Serve as the lead architect providing conceptual and detailed solution designs that are scalable, flexible and secure.
•Assist with identifying, developing and leading innovation initiatives. This will include researching new technologies and/or new applications of existing technologies that will deliver new capabilities to the business.
•Provide strategic guidance and governance relating to technology solutions that will enable the business to meet their safety, financial and strategic goals.
•Develop consistent, repeatable technology patterns that will be used by the engineering and operational groups to design and deploy supportable solutions that will minimize the total cost of ownership.
•Develop and continuously refine overall security architecture in support of our business requirements.
•Define, document and communicate security standards and risks to all areas of our business and IT staff.
•Creation of long-term prioritization plans for shared architecture development across the organization that supports integrated products, without sacrificing short-term goals and needs.
•Work directly with business leaders, project teams and stakeholders to define security requirements to meet business objectives and regulatory requirements.
•Develop the business, information and technical artifacts that constitute the enterprise information security architecture and solutions.
•Conduct ongoing and regular IT Security policy, process, procedure, and standards review.
•Coordinate with internal and external assessment teams on assessments of the technical environment, which includes partnering with the various teams to support the remediation of deficiencies.
•Analyze business impact and exposure, based on emerging security threats, vulnerabilities and risks.


Requirements:

•Bachelor degree in computer science, information systems or other related field
•7 plus years of combined IT and security work experience, with a minimum of 5 years as an Architect. Broad exposure to infrastructure/network and ERP environments.
•Previous leadership experience, with the ability to effectively coach and mentor others
•Expert knowledge of security issues, techniques and implications across all existing computer platforms.
•Knowledge of a security-specific architecture methodology.
•Proven ability in security process and organizational design.
•Experience with Network Security technologies including Firewalls, SIEM Tools, IPsec, VPNs, SSL VPNs, 2 Factor Authentication and Network Access Control.
•Proven ability to drive best practices broadly and deeply throughout a technical and engineering based organization, while able to articulate and convincingly influence decision-makers on technology trends.
•Practical experience designing and building enterprise and/or distributed systems with an emphasis on security.
•Professional security management certification, such as a Certified Information Systems Security Professional with


Information Systems Security Architecture Professional concentration (CISSP-ISSAP), Sherwood Applied Business Security Architecture (SABSA), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials a plus.
 

The Timberline Group
Phone: 636-209-5537
PO Box 565, Sullivan, Mo 63080
"Delivering quality solutions through quality people"
or
this job portal is powered by CATS