Cyber Security - Information Security Security Architect

Cyber Security - Information Security Security Architect

Duration-Contract Location-Buckhead, GA

Job Description:

Administrative / Documentation (20%)· Aid in review of security policies and guide the administration of security tools that control and monitor information security, including: access control, alert on and investigating potential misuse or breaches, design computer system access and reports to limit risk and identify possible security violations, document data privacy and protection.· Develops procedural documentation to ensure all security processes are well defined and maintained.· Maintain current architectural diagrams of our security solutions.

IT / Security Operations Support (10%)· Assist resource owners and IT staff in understanding and responding to security audit failures reported by internal and external auditing departments.· Provide technical consultation in new systems development and enhancement of existing systems related to system security.

Secondary Functions· Understands and supports the Company's goals and objectives and makes certain that his/her actions and decisions are consistent with them.· Keeps his/her supervisor informed of all matters of importance and particularly those instances where deviations from planned results are likely to occur. Performs other responsibilities and duties as assigned by his/her supervisor.

Qualifications:

• 10+ years of experience with Architecture, Install and/or administration of security solutions.
• Security Engineering background, deep technical knowledge.
• Experience with cloud computing and security in the cloud such as AWS.
• Clear understanding and experience implementing security controls to comply with regulatory requirements and laws such as CCPA, SOX as well as risk, control, and assurance frameworks, such as SOC2, ISO, NIST, PCI DSS, etc.
• Experience with multiple information technology and security technologies: IIS, SQL, firewall, IPS/IDS, Windows, Linux, Anti-Virus, mail filtering, WAF, encryption, CA authority, IDM/IAM, multi factor authentication, SSO, VPN, Zero Trust Technologies, Vulnerability Management, DDoS, SIEM, FIM, WIPS, MDM, Pen Testing, VMware and VM server platforms.