Security Architect
About the role
Responsible for the design and engineering of network and systems security infrastructure and connected services in the bank, including network and system security testing and implementation of new products, services or improvements to existing and current security infrastructure. Ensures that network and system security best practices are executed and implemented.
Key responsibilities
Keep the security infrastructure current, make recommendations, and participate in the implementation and continuous improvement of security technologies and services in assigned information security domain
Collaborate cross-functionally with enterprise architects, infrastructure engineers, and data scientists to achieve continuous improvement in the Bank's cyber defense and resilience posture
Serve as subject matter expert (SME) for different enterprise-wide IT and security projects
Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
Investigate and analyze existing cloud structures and create new and enhanced security methods that will enhance the security of on premise and cloud-based environments
Develop and maintain security baseline standards of various operating systems, network devices, databases, security devices and other technologies currently in use in the production environment
Monitor and ensure ITG implements the baseline system security standards in production systems
Analyze, design, and develop business cases for security infrastructure-related solutions and plan and direct the implementation of these solutions
Lead the development of a robust, secure and resilient network design and security architecture that aligns the enterprise security strategy with overall business and technology strategy
Architect, document designs and implement security solutions based on the Information Security roadmap and plan, results of security risk assessments, IT security best practices, and collaborative business analysis
About you
Graduate of any college degree in Computer Science or Information Security, or related technical field of expertise
At least 8 years' experience in building/implementing IT Systems Architecture/Infrastructure Security, authentication technologies, Server Security, Network Security, Database Security, Application Security, Communications Security, Data Security, IT Security Risk Assessment, Vulnerability Assessment, Penetration Testing, Business Continuity, Physical Security, Operations Security and Cloud Secure architecture
At least 8 years' experience in IT security and IT security risk assessment
Understanding of security protocols, cryptography, authentication and authorization
Ability to lead and work well with the team, internal, and external clients
Good teamwork and collaboration skills with the ability to lead security initiatives, explain and enforce security measures
Good project management skills to lead and manage accomplishments of assigned tasks and risk assessment activities
Self-managed, self-starter with good organizational skills
Preferably with IT security related certification such as CISSP, CEH (or equivalent) GIAC, GSEC, etc.
Experience implementing multi-factor authentication, single sign-on, identity management or related technologies a plus