Associate Director- IT Security Architect

Will be direct hire and permanent position

Position Summary:

The Associate Director of Security Architecture will lead the development and implementation of security strategies and solutions to safeguard the organization's information systems. This role involves overseeing the security architecture framework, ensuring compliance with industry standards, and working closely with various stakeholders to identify and mitigate potential security risks.

Key Responsibilities:

1. Security Architecture Development:
   Design, implement, and manage comprehensive security architecture and strategies to protect information assets.
   Develop security policies, standards, and guidelines aligned with organizational goals and industry best practices.
   Evaluate and recommend security technologies and tools to enhance the organization's security posture.
2. Risk Management:
   Conduct risk assessments to identify vulnerabilities and threats to the organization's information systems.
   Develop and implement strategies to mitigate identified risks and ensure business continuity.
   Collaborate with IT and business units to ensure effective risk management practices.
3. Leadership and Team Management:
   Lead and mentor a team of security architects and analysts.
   Foster a culture of security awareness and compliance across the organization.
   Coordinate with other departments to ensure security initiatives are integrated into business processes.
4. Compliance and Governance:
   Ensure adherence to regulatory requirements and industry standards, including GDPR, HIPAA, and others relevant to the organization.
   Prepare and maintain documentation for audits and compliance reviews.
   Stay updated on emerging security threats and trends, and adjust strategies as necessary.
5. Incident Response:
   Oversee the development and execution of incident response plans and procedures.
   Coordinate with internal and external parties during security incidents to ensure prompt and effective resolution.
   Conduct post-incident reviews to improve security measures and response strategies.
6. Stakeholder Engagement:
   Collaborate with senior management and other stakeholders to align security strategies with business objectives.
   Communicate security risks and mitigation strategies to non-technical stakeholders effectively.
   Serve as a subject matter expert on security architecture matters.

Qualifications:

1. Bachelor's degree in Computer Science, Information Security, or a related field. Master's degree preferred.
2. Professional certifications such as CISSP, CISM, or CISA.
3. Minimum of 8 years of experience in information security, with at least 3 years in a leadership role.
4. Proven experience in designing and implementing security architecture frameworks and solutions.
5. Strong understanding of security standards, regulations, and best practices.
6. Excellent leadership, communication, and interpersonal skills.
7. Experience with security tools, technologies, and incident response processes.