Enterprise Security Architect: Risk, Compliance & Cloud

The EITS Security Architect is responsible for designing and implementing enterprise security architecture, translating business security requirements into technical controls, and ensuring compliance with security and regulatory standards. This role partners with IT, infrastructure, and security teams to strengthen the organization’s overall cybersecurity posture.

Roles and Responsibilities

• Design and implement enterprise security architecture and technical security controls.
• Conduct security assessments, vulnerability reviews, and risk analysis.
• Provide guidance on infrastructure, application, network, and cloud security.
• Collaborate with architecture and engineering teams to align security with business and technical requirements.
• Develop security standards, policies, and compliance controls.
• Support audit and regulatory compliance initiatives including HIPAA, NIST CSF, ISO 27001/27002, PCI-DSS, and COBIT.
• Monitor emerging threats and recommend mitigation strategies.
• Develop security metrics, reporting, and risk management processes.

Required Skills

• Strong knowledge of network, infrastructure, application, and security architecture.
• Experience with IAM technologies including Active Directory, MFA, Federation, and PKI.
• Knowledge of TCP/IP, OSI model, encryption, vulnerability management, and secure configuration practices.
• Experience with Windows, Linux/UNIX, and macOS environments.
• Understanding of risk management, compliance, and secure software engineering practices.

Qualifications

• Bachelor’s degree in Information Systems, Cybersecurity, or related field.
• Preferred certifications: CISSP, CISM, GSEC, CEH, or equivalent.
• 10+ years of IT experience with at least 7 years in Cybersecurity/Security Architecture.