Information Security Architect

Information Security Architect

We are seeking a highly skilled Information Security Architect with a deep expertise in data protection to join our dedicated information security team.

The ideal candidate will have extensive experience in building robust security architectures focused on protecting data both technically and operationally within a highly regulated environment.

This role emphasizes the implementation of advanced security frameworks, including cryptography, data protection strategies for data at rest, in motion, and in use, and the deployment of technologies such as Data Security Posture Management (DSPM), Cloud Access Security Brokers (CASB), and Security Service Posture Management (SSPM). The candidate will play a key role in navigating the complexities of audits and compliance initiatives to safeguard our sensitive information.

Architectural Design and Implementation:

• Define, design, and maintain the security architecture for data protection, incorporating industry best practices and regulatory requirements.
• Develop and implement security models and frameworks that support data security across all phases of its lifecycle, including data at rest, in motion, and in use.

Data Protection Strategies:

• Design and deploy cryptographic solutions and protocols tailored to protect sensitive data and ensure compliance with industry regulations.
• Develop and enforce policies for the secure handling, transfer, and storage of data, leveraging solutions like DSPM, CASB, and SSPM.

Regulatory Compliance and Risk Management:

• Ensure that all security architectures align with relevant compliance requirements (e.g., GDPR, HIPAA, PCI-DSS) and industry standards.
• Conduct regular risk assessments and audits of data protection measures, validating their effectiveness and compliance with regulatory demands.

Incident Response and Monitoring:

• Collaborate with incident response teams to design procedures and develop response plans for potential data security incidents.
• Implement continuous monitoring mechanisms for data usage, detecting anomalies in data access patterns for proactive risk management.

Collaboration and Stakeholder Management:

• Work closely with IT teams, legal advisors, and compliance officers to integrate security measures smoothly into systems and operations.
• Engage with stakeholders at all levels to communicate security architecture needs and promote a strong security culture.

Thought Leadership and Innovation:

• Stay current with emerging trends, threats, and technologies in data protection and information security.
• Provide guidance on cutting-edge security technologies and strategies, ensuring that our data protection initiatives leverage the latest advancements in the industry.

These skills will help you succeed in this role:

• Exceptional analytical skills and a strong attention to detail.
• Excellent communication and collaboration skills to work with both technical and non-technical stakeholders.
• Ability to manage multiple projects and priorities in a fast-paced environment.

Education & Preferred Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related fields. A master's degree is preferred.
• Minimum of [7-10] years of experience in information security, with a strong focus on security architecture and data protection.
• Proven experience within a highly regulated industry (financial services, healthcare, government, etc.) and an understanding of its compliance landscape.
• Certifications: Relevant certifications such as CISSP, CISM, CISA, CCSP, or similar recognized credentials in cybersecurity and data protection.
• Technical Skills: In-depth knowledge of cryptographic methods and data protection architectures. Familiarity with advanced data security frameworks including DSPM, CASB, and SSPM. Strong understanding of network security protocols and practices, cloud security, and information assurance.

Salary Range:

$120,000 - $202,500 Annual

The range quoted above applies to the role in the primary location specified. If the candidate would ultimately work outside of the primary location above, the applicable range could differ.

Employees are eligible to participate in State Street's comprehensive benefits program, which includes: our retirement savings plan (401K) with company match; insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages; paid-time off including vacation, sick leave, short term disability, and family care responsibilities; access to our Employee Assistance Program; incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans); and, eligibility for certain tax advantaged savings plans.