Information Security Architect

Information Security Architect

Randstad is partnering with a retail firm that is looking for an Information Security Architect. The IT Security organization bears the broad responsibilities of delivering information security, practice governance & assurance, and data loss prevention throughout the Client enterprise. Our worldwide team applies expertise and deep business understanding to ensure confidence for all company associates, investors, and customers.

Responsibilities:

• Designing and implementing security capabilities in your assigned Platform(s)/Product(s)/Product Line(s) area
• Leading the security by design aspect for your assigned area, leading the technical direction, partnering with engineers, and sharing the security defects and roadmaps of the aligned solutions.
• Helping ensure that our software and infrastructure are designed and implemented with best security practices in mind
• Identifying new or enhance security solution opportunities, developing solutions for known issues/enhancements, utilizing strong communication skills to interact with technical and non-technical colleagues, and providing technical leadership within the Security organization.

Qualifications:

• 5-10 years of engineering experience in relevant technical domain
• Trusted advisor and assists in the creation of security designs, requirements, risk monitoring and mitigation guidance in alignment with industry best practices and regulatory requirements.
• Evangelizes application security program fundamentals, tools, processes and serves as a consultative partner with technology and business teams.
• Experience with fully owning epics, features and stories to provide guidance to product / platform teams and other teams as needed.
• Manages and performs product evaluations, recommends and implements products/services for Information Security that support strategic operational needs and security requirements.
• Experience with Information Security frameworks such as NIST
• Experience within Cloud Platforms such as Azure
• Experience with implementing security automation, i.e. DevSecOps
• Knows how to build a threat model, architecture, design, and test capabilities for required business features.