Security Architect

Parsippany ,

NJ

Contract To Perm

Dec 20, 2023 Title: Security Architect Location: Parsippany, NJ (Remote) Duration: 1 year temp to perm

Description:

The Security Architect role presents a dynamic opportunity to ensure the secure operation of the company's global information technology (IT) cloud-based and acquired/merged infrastructure and processes through developing and implementing new Cybersecurity safeguards, amending and improving existing safeguards, as well as contributing to implementation of necessary security measures and controls within projects across the enterprise.

This role is part of the CIO M&A team focusing on Information Security and will provide an excellent opportunity to liaise with key external and internal stakeholders while strengthening our Information Security function. You will also find yourself working together with other Information Security managers and staff, and with Business Unit teams. This is an opportunity to join and progress with a forward-thinking department.

Principal responsibilities will include:

Work with the company's integration teams to secure M&A environments in alignment with company's process, policies and standards. Work to implement core controls around critical platforms such as the email systems, backup critical servers, network perimeter, BitSight, MFA, EDR, and DLP. Develop information security processes and projects aimed at securing M&A environments through integration into the company's enterprise-level cybersecurity solution or via applying dedicated cybersecurity solutions to M&A environment, as necessary. Support a security program focusing on acquisition environments, including both new technological and organizational capabilities across the enterprise. Ensure delivery of security architecture frameworks, design templates, standards, reference architectures and guidance materials in alignment with the company's Integrated Information Security Framework (IISF) in application to cloud and M&A environments. Engage with third-party specialist service providers and vendors where necessary to support program deliverables, including carrying out vendor and product selections and organizing necessary operational support. Work with a team to develop the improvement of the landscape of technical security safeguards, including assessment and deployment of new capabilities, technologies, and systems as it relates to the M&A environments. Develop secure architecture strategies for the company with respect to technology domain standards and design goals. Research and identify emerging technology solutions that reduce costs, increase efficiencies, provide more value, provide more capabilities, reduce risks, and increase security posture. Evaluate information security components and conduct feasibility studies for selecting appropriate and cost-effective solutions. Assess risks for each security control included in the security integration process and work with Risk Management teams & IT Project Manager to update risk register, current controls and risk treatment plan. Support the effort for the delivery of M&A projects by providing necessary cybersecurity subject-matter expertise and contribution to both secure solution designs and configurations.

Required Experience and Qualifications:

3 to 5 years of professional experience in Information Security, IT Delivery, IT Program Management or other related areas. Experience with securing emails, servers, workstations. Experience with cloud security and cloud security platforms such as CASB, SASE, CSPM, CWPP, SaaS security, CSP (Azure and AWS) IaaS/PaaS security. Experience with Palo Alto Prisma Cloud for Cloud Security Posture Management and Cloud Workload / Container Security. Bachelor's degree in Business Administration, Computer Sciences or equivalent work experience in related areas is preferred. A CISSP, CISM, CCSP or equivalent professional certificate is mandatory. Working knowledge of IT governance frameworks and standards such as CobiT, ITIL, ISO27001, NIST cybersecurity framework. Working knowledge of IT architecture frameworks such as TOGAF and/or project management methodologies. Working knowledge of regulatory and legal requirements frameworks related to information security for healthcare data, such as HIPAA, EU Data Protection Directive and/or equivalent regional frameworks is preferred. Experience in information technology related positions with working knowledge of IT infrastructure, networks design, databases, processing systems, web applications, mobile technology, cloud, big data, virtualization, protocols and technologies supporting encryption, authentication, access control, information systems attack patterns, intrusion detection, and network security.

What are the most important qualifications?

Security Architect Cloud/On-prem infrastructure

Additional Notes:

Can live anywhere but have to work E.S.T. hours. Potential to convert. Must have Architect experience. Global team. Skills:

End point security. Authentication. Cloud (Azure) Security. Data loss prevention.

#J-18808-Ljbffr