Security Architect - Database

$106,300 - $143,000/Yr

Arrow Electronics - Alpharetta, GA

Full-time - Mid Level

Alpharetta, GA

1,001-5,000 employees

Merchant Wholesalers, Durable Goods

About the position

The Security Architect - Database at Arrow Electronics is responsible for leading the database security domain within the Enterprise Security Services program. This role involves developing and maintaining the database security architecture, drafting security standards, and recommending configurations to mitigate risks associated with data assets. The architect will also conduct security assessments, develop strategies for securing restricted data, and ensure compliance with regulations.

Responsibilities

• Lead the Cloud and On-premises database security domain for Arrow's Enterprise Security Services program.
• Develop and maintain Arrow's database security architecture program.
• Draft security standards, procedures, diagrams, and guidelines for executive management approval.
• Recommend database security configurations and initiatives based on identified risks and best practices.
• Evaluate current data protection capabilities, including discovery, classification, and protection policy formulation.
• Conduct security assessments as part of the organization's risk management practice.
• Develop strategies for securing Arrow's Restricted Data during database refreshes and data promotion activities.
• Provide guidance on database models, data flow diagrams, and database schemas to support data management infrastructure.
• Assist database management teams with implementing data masking and anonymizing PII and confidential data.
• Align database security controls with compliance and regulation requirements.

Requirements

• Direct, documented experience with database environments such as Oracle, MS SQL, Mongo DB, AWS S3, Azure SQL PaaS, Databricks, and Snowflake.
• Familiarity with big data/cloud-based database technologies.
• Experience with tokenization for PCI-DSS compliance is desirable.
• Working knowledge of SQL Language.
• Knowledge of database encryption algorithms.
• Bachelor's or master's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent experience (10 to 12 years).
• Security-centric certifications such as CISSP, CISM, CISA, or others are required.

Nice-to-haves

• Experience with implementation of tokenization as a solution for meeting PCI-DSS compliance standards.