Lead Information Security Architect

In this role, you will act as a senior technical advisor to the organization partnering with cross-functional teams to define information security requirements for enterprise information technology systems and internally developed applications. Proactively define security requirements for assigned applications, whether purchased or developed in-house.

• Analyze various technology environments such as on-prem, cloud, SaaS to detect critical security deficiencies and recommend solutions for improvement. Advise various teams such as Information Security and Information Technology as well as collaborate cross-functionally to develop solutions that ensure compliance with security requirements, best practices, applicable state and federal laws, company procedures, and policies.
• Develop an implementation plan for enterprise security architecture based on business requirements and varying strategies for project-driven or product-driven delivery teams. Advise various teams such as Information Security and Information Technology teams as well as collaborate cross-functionally to implement solutions.
• Conduct detailed threat modeling and security testing of enterprise systems and their interactions to resolve problems cost effectively and enable business objectives.
• Ensure secure development lifecycle of applications including design, implementation, testing and maintenance of simple to highly complex computer programs and subsystems. Conduct secure code review to ensure compliance with security requirements, best practices, applicable state and federal laws, company procedures, and policies.

Adhere to and ensure compliance of all business transactions with policy and process of the Bank Secrecy Act. Ensures compliance with all applicable state and federal laws, company procedures and policies. Maintains integrity and ethics in all actions and conversations with or regarding credit union members and their accounts; complies with Privacy Act directives.

The responsibilities listed do not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this position. Duties, responsibilities and activities may change at any time with or without notice.