IT Security Architect 3

Serigor - Richmond, VA

Full-time - Senior

Richmond, VA

Professional, Scientific, and Technical Services

About the position

The IT Security Architect 3 position is a senior role focused on analyzing business needs and developing technology deliverables to enhance security architecture and governance. The architect will create documentation, assist in issue resolution, and extend the scope of IT governance and process improvement, ensuring alignment with security policies and standards.

Responsibilities

• Document processes and script narratives/executive summaries.
• Create business-focused documentation for circulation among readers with various technical understanding.
• Share insight of Security Architecture and IT Governance approaches and implementation methodologies.
• Research and provide written guidance on alignment with security policies/standards.
• Perform tasks related to Security Compliance and Control Evaluation, Risk analysis, and exception documentation.
• Collaborate with business areas and cross-functional Enterprise Architects to fully understand business needs and provide strategic consultation on data security and risk-averse implementation.
• Partner with architects and other technical team members to develop roadmaps and strategies to support agency KPIs.
• Design/Implement Enterprise Security/technology Patterns.
• Consult with teams as needed on initiatives and provide tactical direction as well as provide architecture considerations on legacy solutions.
• Research and share findings of architecture governance, controls, and peer review processes with regards to platform technology, security, and cloud.
• Manage Security Artifacts in SharePoint Online.

Requirements

• Experience in industry or state information security and IT risk management with a focus on security, performance, and reliability.
• Significant experience performing reviews of proposed changes and projects as it pertains to the alignment of applicable state and/or federal security standards/regulations.
• Significant experience in the development, utilization, and presentation of information security architecture policies, standards, and procedures.
• Experience with Information Security Frameworks like NIST-800 series and Cybersecurity Framework, COBIT.
• Experience in monitoring IT environments for compliance with information security architecture policies and standards.
• Substantial technical experience in 2 or more: Cloud-based technologies, Identity & Access Management, Vulnerability Management, firewalls, computer forensic techniques, databases, collaboration tools, web & mail services.
• Ability to provide input and security direction for future designs, information security capabilities, and strategic technology alternatives.
• Excellent written and oral communication and presentation skills, with the ability to break down complex technical terms into everyday language.
• Demonstrated ability to work with a broad cross-section of personnel including all levels of management and external entities such as client consultants and service providers to explain security measures and collaborate and disseminate security-related information in partnership with the Office of Information Security.
• Work experience in a fast-paced environment and acquire new skills/knowledge to meet customer needs.
• Thorough understanding of customers' priorities and the business criticality of platforms, applications, and services.

Nice-to-haves

• Experience with Government security policy
• Experience in Process Modeling