Enterprise Security Principal Architect (ETS)

Navy Federal Credit Union - Winchester, VA

Full-time - Mid Level

Winchester, VA

Credit Intermediation and Related Activities

About the position

The Security Architect position at Navy Federal Credit Union is responsible for providing comprehensive architectural leadership to translate organizational strategies into effective IT and business capabilities. This role focuses on the planning, design, implementation, and integration of IT systems and services, particularly in cloud environments. The Security Architect will develop security strategies, enforce enterprise architecture standards, and collaborate with various stakeholders to ensure the security of IT assets while minimizing operational risks. The position requires a proactive approach to emerging threats and compliance with industry regulations, along with mentoring junior staff and promoting security awareness throughout the organization.

Responsibilities

• Develop and maintain a comprehensive security architecture framework that aligns with NFCU's strategic objectives and regulatory requirements.
• Develop architectural documentation and/or artifacts for use in business and technology projects, knowledge transfer, decision support, and product evaluation.
• Develop target architectures ensuring the integration points of end-user technology services and other related services are consistent, scalable, and flexible.
• Develop and apply architectural reference patterns that guide the selection, development, implementation and use of IT within the enterprise.
• Formulate and implement security strategies and standards to safeguard NFCU's information technology assets.
• Plan and develop robust and secure technical solutions that align with Navy Federal strategies.
• Assist in facilitating architectural governance based on business and IT strategies.
• Partner with IT teams, business units, and stakeholders to ensure security considerations are incorporated into project planning and execution.
• Collaborate on architecture reviews to assess the integrity and quality of proposed technical solutions.
• Participate in risk assessments and security assessments with cross-functional teams to identify vulnerabilities and recommend remediation strategies.
• Ensure compliance with industry regulations, such as PCI-DSS, HIPAA, and FFIEC, by implementing appropriate security controls and practices.
• Stay informed on the latest security trends, threats, and technology advancements to continuously enhance NFCU's security posture.
• Provide guidance and mentorship to junior security staff and promote security awareness throughout the organization.

Requirements

• 5+ years of experience as a Security Architect.
• Experience in Zero Trust Architectures and implementation of zero trust principles in cloud environments.
• Extensive experience in Cloud Security with a deep understanding of cloud platforms such as AWS, Azure, or Google Cloud.
• Ability to design and implement secure cloud-based solutions.
• Significant experience with The Open Group Architecture Framework (TOGAF) v.9 or higher, or relevant architecture framework.
• Significant experience with Service Oriented Architectures.
• Experience in utilizing various development and operations framework methodologies including Systems Development Life Cycle (SDLC) and/or Information Technology Infrastructure Library (ITIL).
• Ability to communicate technical concepts effectively at all levels, including non-technical audiences.
• Experience in translating business needs into comprehensive architecture designs and artifacts.
• Experience in developing business and/or technical architecture diagrams.
• Experience in facilitating review and validation of architecture designs by technical and non-technical audiences.
• Experience in performing various forms of analysis including systems analysis and business process analysis.

Nice-to-haves

• Master's Degree in Information Technology, Computer Science, Cybersecurity, or related field.
• Advanced knowledge of banking and financial industry standards and practices.
• Advanced knowledge of regulatory and compliance-related mandates such as CCPA and GDPR.
• Certification in TOGAF, COBIT, Microsoft AZURE Solution Architect, or Scaled Agile.
• Certified Information Systems Auditor (CISA).
• Certified Cloud Security Professional (CCSP).
• Offensive Security Certified Professional (OSCP).
• Experience with tools like Terraform or Ansible for cloud infrastructure automation.

Benefits

• Highly competitive pay
• Generous benefits and perks
• Hybrid workplace options
• Opportunities for career growth and development
• Recognition as one of the best companies to work for in various categories.