Security Architect (4865)
Summary
Trinity Health seeks a Security Architect to design enterprise-wide security architecture across on-premises and cloud environments, covering IAM, zero-trust networks, encryption, and compliance with NIST CSF and HIPAA. Day to day involves threat modeling, vendor risk reviews, GRC governance, and building red-teaming and incident-response programs.
Position Summary:
We are seeking an experienced and strategic Security Architect to design, build, and oversee the implementation of enterprise-wide security systems and infrastructure. In this role, you will define security standards, evaluate risks, and collaborate closely with engineering, IT, and business teams to ensure our software, systems, and cloud environments remain secure and resilient against evolving threats.
The ideal candidate combines deep technical expertise in security frameworks, familiarity with security solutions, and cloud platforms with the communication skills needed to align security initiatives with broader business objectives.
Key Responsibilities:
Architectural Strategy & Design
- Design and establish enterprise security architectures, standards, and blueprints across on-premises environments and assist in the evaluation of future state security operations.
- Integrate security into IT operations by driving secure operational practices, monitoring, response, and continuous compliance testing.
- Help define and maintain Identity and Access Management (IAM) strategies, zero-trust network architectures, data protection schemes, and encryption standards.
Risk Management & Compliance
- Perform threat modeling, risk assessments, and vulnerability analysis on existing systems and proposed infrastructure changes.
- Ensure organizational compliance with relevant industry frameworks, regulations, and standards (NIST CSF and HIPAA).
- Evaluate third-party vendors and external technologies for security risks prior to adoption.
- Develop a security training and awareness program to further reduce insider risk.
- Develop a red teaming or penetration testing program to better evaluate risk posture and resilience.
Collaboration & Governance
- Serve as a trusted security advisor to DFG, IT infrastructure, SLT, and Directors.
- Participate in GRC council and Change Management board to approve software, infrastructure, and network changes.
- Develop, document, and enforce enterprise security policies, governance controls, and baseline guidelines.
Incident Response Support & Security Research
- Collaborate with the Incident Response (IR) team to refine playbooks and evaluate security posture following major incidents.
- Stay current with emerging cybersecurity threats, zero-day vulnerabilities, and security technologies to proactively upgrade defenses.