Senior Information Security Advisor - Threat Risk Assessment & Security Architecture

Job Description

Software Guidance & Assistance, Inc. (SGA) is searching for a Senior Information Security Advisor – Threat Risk Assessment & Security Architecture for a CONTRACT assignment with one of our premier Financial Services clients. This is a remote position supporting U.S. Information Security and Control, working Eastern Time hours.

Responsibilities:

\n

\n
• Independently conduct hands-on Threat Risk Assessments (TRAs), threat modeling, and technical security assessments across applications, infrastructure, networks, cloud, hybrid cloud, and SaaS environments.
\n
• Review application and infrastructure architecture diagrams, security configurations, and technical designs to identify threats, vulnerabilities, control gaps, and potential risks.
\n
• Evaluate security controls across applications, networks, servers, and cloud environments, recommending appropriate safeguards and compensating controls.
\n
• Analyze vulnerability scan reports, server hardening configurations, and supporting evidence to assess security exposures and prioritize remediation.
\n
• Assess cloud architectures, including IaaS/PaaS environments, native cloud security controls, and application deployments.
\n
• Provide technical security advisory services to business lines, application owners, architects, and infrastructure teams.
\n
• Support secure-by-design initiatives by incorporating security requirements into the early stages of technology projects.
\n
• Recommend practical security solutions and remediation strategies that balance technical risks, regulatory requirements, and business objectives.
\n
• Communicate technical security findings and recommendations clearly to both technical and nontechnical stakeholders.
\n
• Ensure security assessments and recommendations align with enterprise security standards, industry frameworks, and applicable U.S. regulatory requirements.

\n

Required Skills:

\n

\n
• 5+ years of hands-on experience performing technical security assessments across applications, network infrastructure, and complex technology environments.
\n
• 3+ years of experience personally conducting Threat Risk Assessments and threat modeling across on-premises, cloud, hybrid cloud, and SaaS environments. Experience limited to reviewing assessments performed by others is insufficient.
\n
• 2+ years of experience in security solution architecture, software development, or hands-on security implementations, including application security controls and compensating controls.
\n
• 3+ years of experience reviewing vulnerability reports, server hardening requirements, and validating security controls through supporting evidence.
\n
• Strong technical understanding of application security, infrastructure security, network security, and security architecture.
\n
• Practical knowledge of AWS, Azure, or GCP cloud infrastructure, native security controls, IaaS/PaaS service models, and how applications are deployed and secured in cloud environments.
\n
• Understanding of U.S. information security regulatory requirements and practices; experience in regulated industries is acceptable.
\n
• Ability to independently identify security risks, evaluate technical controls, and recommend remediation strategies.
\n
• Strong written and verbal communication skills, with the ability to explain technical security risks and recommendations to business and technology stakeholders.
\n
• Post-secondary education in Computer Science or a related discipline.

\n

Preferred Skills:

\n

\n
• Prior information security advisory experience within banking or financial services.
\n
• Familiarity with U.S. banking regulatory requirements, including FFIEC guidance, GLBA, OCC, and NYDFS cybersecurity requirements.
\n
• Strong application security expertise combined with broader infrastructure, network, and cloud security experience.
\n
• Knowledge of security frameworks including NIST 800-53, ISO 27001/27002, ISO 27017/27018, PCI DSS, and CIS Controls.
\n
• Experience using ServiceNow.
\n
• Security certifications such as CISSP, CISM, CCSP, or CRISC.
\n
• Experience supporting secure-by-design initiatives and enterprise security architecture reviews.

\n

By applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at View email address on ziprecruiter.com to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations.\n
\n
\nBy applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at View email address on ziprecruiter.com to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations.\n
\n
\nBy applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at View email address on ziprecruiter.com to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations.\n
\n
\nBy applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at View email address on ziprecruiter.com to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations.\n
\n
\nSGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .\n
\n
\nSGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company EEO page to request an accommodation or assistance regarding our policy.\n
\n