Cybersecurity Architect Advisory Consultant

Description Summary: The Cybersecurity Architect Advisory Consultant reports to the Cybersecurity Architect Senior Manager and frequently interacts with the chief information security officer, as well as audit and compliance. The security solution architect is responsible for designing security solutions that protect business and customer data but also allow the business to execute and innovate. The Cybersecurity Architect Advisory Consultant works closely with many diverse and dynamic teams, including, but not limited to, security engineering, IT infrastructure, application development, security operations, security audit and end users. This position is also responsible for architecting solutions to secure business-to-business initiatives, third-party relationships, outsourced solutions and vendors. The Cybersecurity Architect Advisory Consultant provides expert guidance for addressing current security issues but has the foresight to see where the industry is headed and proactively deliver optimal secure solutions. The architect is expected to think like an adversary and identify how solutions should evolve as the threat landscape changes. The position is 40% security architecture, 50% technical leadership, and 10% research and development. The individual partners with product managers and solution architects to set the security direction of offerings and articulates the value proposition. Also, the position provides guidance to Line of Business CIOs and is the final approver of information security controls on projects. Duties & Responsibilities: Guides businesses to leverage common information security patterns Partners with subject matter experts to improve information security patterns and services Ability to work with leaders and team members at all levels and across functional lines Demonstrated experience establishing and maintaining effective working relationships Strong analytical skills and the ability to think strategically Critical thinking skills and does not hesitate to question status quo Self-starter with a passion for providing value to organizations Performs other duties as assigned Basic Qualifications: 2+ years of cybersecurity architecture experience 6+ years of information security experience 6+ years of experience delivering technology solutions 3+ years of experience in architecture, governance, risk management, PCI DSS control governance, application security, encryption, key management, and identity and access management Associate's degree or 4+ additional years of equivalent experience Preferred Qualifications: Extensive knowledge of traditional security controls and technologies, such as: Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), identity and access management (IDAM) systems, antivirus and firewalls, in addition to newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls Experience with a broad range of mobile and wed application design, development, and management principles, practices, and procedures Experience influencing management on technical and business solutions Experience in cloud computing technologies, including software-, infrastructure and platform-as-a-service, as well as public, private and hybrid environments Excellent verbal, written, and interpersonal communication skills Knowledge and understanding of data protection technologies and practices Knowledge and understanding of threat analysis and assessment of potential and current information security risk/threats Strong understanding of application or software security such as dynamic application security testing, secure code review, and secure static code analysis Knowledge and understanding of cryptography and key management Knowledge and understanding of service-oriented architecture and associated security controls Knowledge and understanding of enterprise authentication and authorization technologies such as LDAP, SAML, XACML, and reverse authenticating proxies. General understanding of diverse platforms and operating systems, including current and emerging technologies Certified Information Systems Security Professional (CISSP) Experience architecting applications for financial services business Exempt Status: (Yes = not eligible for overtime pay) (No = eligible for overtime pay) Yes Workplace Type: Office Our Approach to Office Workplace Type Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds: in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team. Compensation Range: $70,000 - $140,000 Annual Salary The compensation range represents the anticipated low and high end of the base compensation range for this position. Actual compensation will vary based on various factors including but not limited to location, experience, and education. Colleagues in this position are also eligible to participate in an applicable incentive compensation plan. In addition, Huntington provides a variety of benefits to colleagues, including health insurance coverage, wellness program, life and disability insurance, retirement savings plan, paid leave programs, paid holidays and paid time off (PTO). Huntington is an Equal Opportunity Employer. Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details. Note to Agency Recruiters: Huntington will not pay a fee for any placement resulting from the receipt of an unsolicited resume. All unsolicited resumes sent to any Huntington colleagues, directly or indirectly, will be considered Huntington property. Recruiting agencies must have a valid, written and fully executed Master Service Agreement and Statement of Work for consideration. Welcome to Huntington! At Huntington, we look out for people. From reinventing banking with game-changing innovations to building an internal culture that creates lifelong bonds, together, we can make people’s lives better. And amazing things happen when we look out for each other. We prove it every day. Whether it’s helping a colleague or collaborating on a new tool that will revolutionize the way people save money, our actions can have a huge impact. Our colleagues look out for people with a Can-Do Attitude, Service Heart and Forward Thinking. Those are our values—simple but powerful. Each of them pushes us do the right thing, to do right by people. Because people are what matter. If that sounds like you, we hope you’ll apply to join our team. If you’d like to learn more about how Huntington looks out for people, visit We endeavor to make this site accessible to any and all users. If you would like to contact us regarding the accessibility of this site or if you require a reasonable accommodation to apply for a job or to perform the essential functions of the job, please send an email to View email address on click.appcast.io Reasonable Accommodations Reasonable Accommodations Various methods will be used throughout the recruitment process to verify candidate authenticity. Any interviews conducted virtually must be joined from a distraction-free environment, with the candidate on camera and without the use of virtual backgrounds. EEOC Disclaimer Know Your Rights CA Data Privacy CA Data Privacy Rights Tobacco Disclaimer Tobacco-Free Hiring Practice Note to Agency Recruiters: Huntington will not pay a fee for any placement resulting from the receipt of an unsolicited resume. All unsolicited resumes sent to any Huntington colleagues, directly or indirectly, will be considered Huntington property. Recruiting agencies must have a valid, written and fully executed Master Service Agreement and Statement of Work for consideration.