VDOT IT Security Architect Lead

nLeague - Richmond, VA

Full-time

Richmond, VA

About the position

The Security Architect Lead at the Virginia Department of Transportation's Information Technology Division is responsible for analyzing business needs and developing technology deliverables to support the Enterprise Architecture Program. This role involves creating documentation, conducting risk assessments, and collaborating with various stakeholders to ensure alignment with security policies and standards.

Responsibilities

• Documents processes and script narratives/executive summaries.
• Create business-focused documentation for circulation among readers with various technical understanding.
• Share insight of Security Architecture and IT Governance approaches and implementation methodologies.
• Research and provide written guidance on alignment with security policies/standards.
• Perform tasks related to Security Compliance and Control Evaluation, Risk analysis, and exception documentation.
• Collaborate with business areas and cross-functional Enterprise Architects to fully understand business needs and provide strategic consultation on data security and risk-averse implementation.
• Partner with architects and other technical team members to develop roadmaps and strategies to support agency KPIs.
• Design/Implement Enterprise Security/technology Patterns.
• Research and share findings of architecture governance, controls, and peer review processes with regards to platform technology, security, and cloud.

Requirements

• Experience in industry or state information security and IT risk management with a focus on security, performance, and reliability.
• Significant performing reviews of proposed changes and projects as it pertains to the alignment of applicable state and/or federal security standards/regulations.
• Significant experience in the development, utilization, and presentation of information security architecture policies, standards, and procedures.
• Experience with Information Security Frameworks like NIST-800 series and Cybersecurity Framework, COBIT.
• Experience monitoring IT environments for compliance with information security architecture policies and standards.