Lead IT Security Architect

Position Title: Lead IT Security Architect

This role is designed for remote work.

Overview:
The Lead IT Security Architect is responsible for embedding security methodologies into our DevOps and Platform Engineering frameworks. As a vital contributor to the enterprise risk management team, this role focuses on secure platform engineering initiatives, emphasizing the secure development and operation of our banking and cloud environments.

Compensation Type: Salary

Key Responsibilities:
To excel in this position, the individual must effectively carry out the following essential functions. Reasonable accommodations may be made for individuals with disabilities to perform these essential duties.

• Formulate and implement a thorough IT Security review strategy that incorporates ongoing security practices, controls, and reporting into our banking and Banking as a Service (BaaS) operations.
• Oversee the secure architecture and design of resilient AWS cloud infrastructure to facilitate scalable and secure applications.
• Establish and uphold security processes, including code security assessments, secure application development, data protection, and secure API integrations.
• Conduct continuous monitoring, logging, and management of security alerts to ensure prompt responses to vulnerabilities and threats.
• Adopt security best practices for cloud infrastructure across platforms such as AWS, Azure, or Cloudflare, focusing on identity and access management, network security, and data encryption.
• Implement security best practices across the organization, including BaaS frameworks, transaction processes, and data sharing protocols.
• Deploy monitoring and logging solutions to identify security threats and anomalies in real-time, developing incident response strategies to address security events swiftly.
• Ensure adherence to federal and state banking security regulations and industry standards, including but not limited to FFIEC, NIST, GDPR, HIPAA, PCI-DSS, OWASP, and SOC 2, while leading efforts to secure and maintain relevant certifications.
• Act as a Subject Matter Expert (SME) on secure design principles, collaborating with key business partners, including a team of Security engineers, to provide guidance, support, and technical expertise in driving security initiatives and promoting a culture of security excellence.
• Enhance application architecture with security standards and best practices, defining baseline configurations.
• Collaborate with teams to establish key performance indicators (KPIs) and key risk indicators (KRIs), distributing valuable security-related metrics to stakeholders.
• Maintain comprehensive documentation of security controls, policies, procedures, and incidents to ensure compliance and facilitate knowledge sharing.
• Work alongside cross-functional teams, including development, operations, security, and business units, to ensure the seamless integration of DevSecOps practices with organizational objectives.
• Execute responsibilities in alignment with our core values and operational principles, adhering to policy and applicable laws, while committing to continuous improvement and process excellence.
• Other responsibilities as assigned.
  

Reporting Structure:

Reports to: Chief Compliance Officer / Chief Information Security Officer

Qualifications:

Education:

• Bachelor's degree in Computer Science, Engineering, or a related discipline.

Required Knowledge/Skills:

• Extensive experience in building, securing, monitoring, and scaling workloads in AWS.
• In-depth understanding of security principles, best practices, and compliance standards.
• Proven ability to implement and enforce security policies and practices throughout the DevOps lifecycle.
• Hands-on experience with security tools and frameworks, including static code analysis, vulnerability scanning, and security testing.
• Expertise in Cloud Security tools, including EDR, SIEM, and IDS toolsets, along with vendor selection and management.
• Proficiency in Terraform and Infrastructure as Code, including the creation and maintenance of modules.
• Experience with CI/CD tools and creating pipelines to support the security lifecycle.
• Familiarity with containerization technologies such as Docker and container orchestration platforms like Kubernetes, with an emphasis on container security.
• Strong grasp of networking, encryption, access controls, and authentication mechanisms.
• Solid understanding of networking concepts, security best practices, and compliance standards.
• Strong scripting skills in Python, PowerShell, Bash, or other scripting languages.
• Experience with security principles related to IAM, DLP, SDLC, IT asset management, secure architecture, and Incident Response.
• Experience with Agile methodologies and leading Agile teams.
• Ability to analyze information and make logical recommendations.

Desired Skills:

• Experience in banking or another highly regulated industry.
• Experience working with offshore resources in EMEA.
• Familiarity with IT Governance as Code and Policy as Code.
• Experience with New Relic or other SaaS monitoring platforms.
• Experience with Azure DevOps, GitHub Actions, or other CI/CD tools.
• Knowledge of the OWASP top 10 framework and other security frameworks.
• Experience with Cloudflare.
• Experience with Ansible or other configuration as code tools.
• Experience with repository and artifact management.
• Relevant security certifications (e.g., CISSP, CEH, AWS Certified Security Specialty) are advantageous.
• Willingness to learn and adapt to new technologies.
• Knowledge of agile methodologies is preferred.
• The ideal candidate will possess a comprehensive understanding of banking applications, core provider integrations, AWS cloud services, DevOps, security practices, and a commitment to fostering a security-first culture.

Desired Experiences:

• 8+ years of relevant experience in DevOps, SecOps, or similar roles, with a strong emphasis on AWS cloud services.
• 2+ years of experience in a leadership capacity.
• 2+ years of experience in one or more security domains:
  • Identity & Access Management
  • Detection & Response
  • Vulnerability Management

Key Attributes:

• Ability to think creatively, inspire new ideas, and challenge existing perspectives.
• Exceptional leadership, communication, and interpersonal skills.
• Capability to present information to diverse audiences, including senior management.
• Strong positivity and mission-driven mindset.
• Competitive, goal-oriented, enthusiastic, and motivated to develop self and others.
• Energetic, resourceful, and appropriately intense to accomplish tasks.
• Organized, detail-oriented, and able to concentrate in distracting environments.
• Curious and willing to embrace new experiences.
• Strong interpersonal skills and relationship-building abilities; naturally inclined to establish positive personal and professional connections.

Additional Requirements:

• Ability to interpret a variety of instructions provided in written, oral, diagram, or schedule form.
• Must be able to lift up to 20 pounds.

TransPecos Banks does not accept unsolicited resumes from any source other than the candidate. Any candidate referred to us by an Agency through an unsolicited resume will be considered to have been referred free of any charges or fees, except for those agencies we engage for specific searches. TransPecos Banks will not pay a fee for any placement resulting from the receipt of an unsolicited resume.