Senior Information Security Architect - Data Protection

Company : enGen Job Description : JOB SUMMARY CANDIDATE MUST BE US Citizen (due to contractual/access requirements) This job takes a lead role in developing and guiding implementations of practical security architectures that appropriately mitigate risks depending on factors such as data sensitivity and operational impacts; this role will focus on, but not be limited to supporting Data Protection solutions. Security architectures must be developed in alignment with IT and security standards, applicable security and control frameworks, and security best practices. Experience producing Threat Models to evaluate proposed technical architectures. Any control, policy or standard gaps identified during the course of developing security architectures or Threat Modeling exercises must be documented and formally assessed through standard risk assessment processes. The Senior Information Protection Security Architect must have the ability to provide detailed technical recommendations on appropriate mitigation measures. Must be able to effectively collaborate, advise, and consult colleagues responsible for developing and implementing technical architectures, services and controls. Research and evaluate new security technologies to be used as practical point solutions to address gaps where existing tools and services are deemed to be inadequate. Security architecture work will include data protection, network security and defense, operating system security, identity, authentication, and authorization, application security, activity audit and monitoring, mobile computing security, and third-party access to corporate systems/data. Must have competency in developing and applying sound and practical security architecture principles within both On Premises and multi-Cloud environments. The ability to produce detailed and accurate security architecture documentation and accompanying narratives as well as strong verbal and written communication with stakeholders at all levels of the organization, including executive leadership, is required. This role is expected to provide mentorship to peers and more junior team members. ESSENTIAL RESPONSIBILITIES Enhance security team accomplishments and competence by leading delivery of solutions; answering technical and procedural questions for less experienced team members; teaching improved processes; mentoring team members. Determine most complex security requirements by evaluating business strategies and requirements; conducting system security and vulnerability analyses and risk assessments; identifying integration issues; preparing cost estimates. Lead security systems by evaluating network and security technologies. Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures. Implement security systems by specifying intrusion detection methodologies and equipment; directing equipment and software installation and calibration; preparing preventive and reactive measures. Enhance department and organization reputation by accepting ownership for accomplishing new and different requests; exploring opportunities to add value to job accomplishments. Provide leadership and mentoring in the areas of expertise and architecture to peers, developers, management and business users including technical expertise, coaching, and ad-hoc training. Support assurance compliance to required standards, procedures, guidelines and processes. Other duties as assigned or requested. REQUIRED EDUCATION Bachelors Degree in Information Systems, Computer Science, Information Security, Engineering, or related field, or or relevant experience and/or education as determined by the company in lieu of bachelor's degree PREFERRED EDUCATION Masters Degree in Computer Science, Information Security, or related field EXPERIENCE Minimum: 7-10 years' experience architecting solutions 10-15 years' experience in Information Security Experience communicating with business partners Use of security patterns and security best patterns such as threat modeling Preferred: 10 - 15 years' experience architecting solutions KNOWLEDGE, SKILLS & ABILITIES Business communication skills, both written and verbal and able to solve unconventional problems Understanding of the TCP/IP protocol stack, application protocols such as SNMP, SMTP, DNS, and DHCP; IPSec and SSL VPNs; SSL/TLS protocol knowledge Understanding of the information technology and information security industries, their current developments, trends, issues, and fundamental concepts In-depth expertise in analyzing a wide spectrum of technical systems and services robustness and needs, and making practical recommendations to address them Expert of web, mobile, and client application security vulnerabilities, attack methods, and countermeasures Experience with common information security management frameworks, such as HITRUST, ISO 27001, CobiT, ITIL Knowledge of ubiquitous encryption technologies (PGP, SSH, SSL, etc.) and common protocols (RADIUS, LDAP, KERBEROS, SAML, etc.) Able to lead evaluations and recommend solutions to support enterprises security controls including: networking, firewalls, IDS/IPS, data loss prevention, application security, infrastructure security, and data security REQUIRED LICENSURE (Licenses that are required to perform the job) None PREFERRED LICENSURE Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA) TRAVEL REQUIREMENT: 0% - 25% LANGUAGE REQUIREMENT ( other than English )? None PHYSICAL, MENTAL DEMANDS AND WORKING CONDITIONS ( The physical, mental demands and working conditions described here are representative of those that must be met by an employee to successfully perform the essential function of their job. Reasonable accommodations will be made when necessary to enable individuals with disabilities to perform the essential duties of the position, to the extent that they do not cause undue hardship. Position Type: Office-Based Office-Based Positions An employee in this position works in an office environment. The position frequently requires the employee to communicate effectively with others both inside and outside the workplace (e.g., in person, via telephone, via email). The employee must be able to understand, interpret and analyze data, solve problems, concentrate, and research, use available technological resources and systems (e.g., computers and computer programs), multi-task, prioritize, and meet multiple deadlines to complete essential tasks. The employee generally works in a fast-paced and frequently stressful environment, must attend work on a regular and reliable basis as well as adhere to all workplace policies, and may be called upon to work outside regular business hours. Teaches/Trains others regularly Occasionally Travels regularly from the office to various work sites or from site-to-site Occasionally Works primarily out-of-the office selling products/services (Sales employees) Never Physical Work Site Required Yes Most On-The-Road Positions An employee in this position may work in a home or company office environment but is also frequently driving to and from various locations to perform the work off-site. The position frequently requires the employee to communicate effectively with others both inside and outside the workplace (e.g., in person, via telephone, via email). The employee must be able to understand, interpret and analyze data, solve problems, concentrate, and research, use available technological resources and systems (e.g., computers and computer programs), multi-task, prioritize, and meet multiple deadlines to complete essential tasks. The employee generally works in a fast-paced and frequently stressful environment, must attend work on a regular and reliable basis as well as adhere to all workplace policies, and may be called upon to work outside regular business hours. Non-Office-Based Positions An employee in this position is frequently required to move throughout the workplace, sit, stand and walk, use hands and fingers to hold objects, tools or controls, possess fine motor skills (e.g., to write and operate a computer or to steer transportation equipment), possess gross motor skills (e.g., to carry items), reach with hands and arms, climb stairs and ladders, balance, stoop, kneel crouch and crawl, communicate effectively, and talk and hear. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus. The employee must be able to work in a busy environment where decisions often must be made quickly, must attend work on a regular and reliable basis, must adhere to all workplace policies, and may be called upon to work outside regular business hours. This work occurs in a [example: warehouse, hospital or providers office or mailroom]. Lifting: up to 10 pounds Does Not Apply Lifting: 10 to 25 pounds Does Not Apply Lifting: 25 to 50 pounds Does Not Apply ADDITIONAL INFORMATION Changes Approved By: Kathleen Thompson Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job. Compliance Requirement: This position adheres to the ethical and legal standards and behavioral expectations as set forth in the code of business conduct and company policies As a component of job responsibilities, employees may have access to covered information, cardholder data, or other confidential customer information that must be protected at all times. In connection with this, all employees must comply with both the Health Insurance Portability Accountability Act of 1996 (HIPAA) as described in the Notice of Privacy Practices and Privacy Policies and Procedures as well as all data security guidelines established within the Companys Handbook of Privacy Policies and Practices and Information Security Policy. Furthermore, it is every employees responsibility to comply with the companys Code of Business Conduct. This includes but is not limited to adherence to applicable federal and state laws, rules, and regulations as well as company policies and training requirements. Pay Range Minimum: $92,300.00 Pay Range Maximum: $170,800.00 Base pay is determined by a variety of factors including a candidates qualifications, experience, and expected contributions, as well as internal peer equity, market, and business considerations. The displayed salary range does not reflect any geographic differential Highmark may apply for certain locations based upon comparative markets. Highmark Health and its affiliates prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, age, religion, sex, national origin, sexual orientation/gender identity or any other category protected by applicable federal, state or local law. Highmark Health and its affiliates take affirmative action to employ and advance in employment individuals without regard to race, color, age, religion, sex, national origin, sexual orientation/gender identity, protected veteran status or disability. EEO is The Law Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity ( https://www.eeoc.gov/sites/default/files/migrated_files/employers/poster_screen_reader_optimized.pdf ) We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact number below. For accommodation requests, please contact HR Services Online at HRServiceshighmarkhealth.org California Consumer Privacy Act Employees, Contractors, and Applicants Notice Req ID: J249946