BEST Program Security Architect.

Location: Boston, MA Salary: $90.00 USD Hourly - $95.00 USD Hourly Description:
Position Summary

The Information Security Architect will support the adoption of future-state security solutions and protocols for a large-scale cloud-based Human Resource and Payroll implementation. The role will collaborate with project leadership, technical teams, risk management, security stakeholders, system integrators, and vendors to:

• Deploy technical controls that meet end-user security requirements
• Establish and maintain security standards and configurations
• Develop and implement information security programs
• Monitor security compliance and risk mitigation activities
• Support identity and access management processes
• Ensure secure system design and architecture
• Develop security documentation, policies, and procedures
• Oversee security operations, compliance, auditing, and incident management

Core Responsibilities
Security Governance & Compliance

• Design security monitoring protocols and procedures
• Monitor vendor security performance and SLA compliance
• Support annual security audits and disaster recovery testing
• Develop security policies, standards, and procedures
• Monitor compliance with security policies and regulatory requirements
• Conduct risk and compliance assessments
• Assist with audit preparation and documentation

Security Architecture

• Translate security requirements into technical solutions
• Provide security architecture guidance and recommendations
• Design future-state security solutions
• Document security designs and technical controls
• Review solution architectures for compliance and risk mitigation

Identity & Access Management

• Define user roles and permissions
• Support user onboarding and offboarding processes
• Implement and oversee:
  • Single Sign-On (SSO)
  • Identity and Access Management (IAM)
  • Multi-Factor Authentication (MFA)
  • Access provisioning and de-provisioning
• Establish role-based access controls

Risk Management

• Identify and assess security risks
• Maintain risk mitigation strategies
• Support risk registers and escalation processes
• Conduct business impact and vulnerability assessments
• Recommend remediation strategies

Security Operations

• Assist with security incident response
• Monitor security logs and reports
• Support Security Information and Event Management (SIEM)
• Analyze threat intelligence and security alerts
• Investigate security incidents and anomalies

Business Continuity & Disaster Recovery

• Develop and document recovery procedures
• Support testing and validation activities
• Participate in operational planning
• Monitor business continuity readiness

Cloud & SaaS Security

• Support cloud-hosted security architecture
• Monitor SaaS security controls and compliance
• Review security controls for cloud applications
• Ensure secure migration and operation of cloud-based systems

Data Security

• Develop data access control strategies
• Support data conversion and migration security
• Define security controls for integrations and interfaces
• Ensure protection of sensitive information

AI Security Oversight

• Review and advise on AI tool usage
• Assess AI-related security risks
• Provide recommendations regarding secure AI adoption

Technical Focus Areas
Security Domains

• Infrastructure Security
• Application Security
• User Authentication Security

Security Technologies

• SIEM
• IAM
• SSO
• MFA
• PAM
• DLP
• Endpoint Security
• Vulnerability Management
• Encryption (At Rest & In Transit)
• Anti-malware Solutions
• Automated Compliance Tools

Platforms & Tools

• Workday
• Workday Prism
• Azure Active Directory (Azure AD)
• JIRA
• Microsoft Security Technologies
• Snowflake Security Functions

Security Frameworks & Standards

• NIST
• ISO 2700x
• COBIT
• ITIL
• SOX
• COSO
• PCI
• FERPA
• GLBA

Required Qualifications
Education

• Bachelor's degree in Computer Science, Systems Analysis, or related field
• Equivalent experience in audit, compliance, security risk, and compliance management may be considered

Experience

• Minimum 9 years of IT design and implementation experience
• Minimum 5 years of Security Architecture design and implementation experience
• Experience developing security architecture, policies, and standards
• Experience implementing cloud-based security solutions
• Experience integrating third-party security solutions
• Experience creating security documentation and operational procedures
• Experience with risk, business impact, control, and vulnerability assessments
• Experience using issue tracking systems such as JIRA

Technical Expertise

• Identity Management (IDM)
• SSO technologies
• IAM solutions
• Network security
• Infrastructure security
• Data security
• Application security
• Database security
• System administration and operations
• Cloud security architecture

Soft Skills

• Strong communication skills
• Business analysis capabilities
• Planning and organizational skills
• Stakeholder management
• Cross-functional collaboration

Preferred Qualifications

• Human Resource and Payroll system security experience
• Workday security administration experience
• Workday Prism experience
• AI security experience
• Government-sector implementation experience
• SaaS transformation and cloud migration experience
• Audit, governance, and compliance experience
• Microsoft security technologies experience
• Snowflake security experience
• Experience transitioning security responsibilities to business users
• Large-scale enterprise security program experience

Medical, dental, and vision insurance are available to qualified candidates who meet eligibility requirements.
By providing your phone number, you consent to: (1) receive automated text messages and calls from the Judge Group, Inc. and its affiliates (collectively "Judge") to such phone number regarding job opportunities, your job application, and for other related purposes. Message & data rates apply and message frequency may vary. Consistent with Judge's Privacy Policy, information obtained from your consent will not be shared with third parties for marketing/promotional purposes. Reply STOP to opt out of receiving telephone calls and text messages from Judge and HELP for help.

Contact:

This job and many more are available through The Judge Group. Please apply with us today!