What are the responsibilities and job description for the Information Security Architect position at Palmer Group?
Job Details
Our client is growing their Information Security team, recruiting a dynamic and experienced Information Security Architect. You will play a vital role in leading the security architecture, ensuring measures are integrated from the design phase through implementation. You'll collaborate with various teams for all projects, guiding and approving security frameworks and solutions across the organization.
Local candidates can enjoy a hybrid working environment at our beautiful headquarters located in Moline, IL. We will also consider remote candidates.
Work model:
- On-Site, Remote or Hybrid
What you will do:
- Evaluate and assess the security protocols of third-party vendors and partners
- Engage in negotiating security terms in vendor contracts to ensure robust data protection and compliance
- Lead efforts to identify and mitigate risks associated with IT operations
- Maintain and update the Cyber Security Risk Register
- Act as the primary contact during external audits and compliance reviews
- Collaborate to enhance identity and access management practices
- Serve as a backup for related roles as needed
- Assist in developing and refining incident response strategies
- Provide expert knowledge and support during security incidents
What you will need to be successful:
- At least 5 years of hands-on experience in information security, with significant involvement in security architecture and risk management
- In-depth knowledge of NIST frameworks, CIS Benchmarks, and regulatory compliance standards such as GLBA and PCI DSS, essential for ensuring project adherence to stringent security requirements
- Preferred certifications include CISSP, CISM, CISA, or similar, demonstrating a strong commitment to information security principles and practices
- Comprehensive understanding of security architectures, data protection protocols, and risk management crucial for developing robust security strategies and frameworks
- Proficiency in technical security solutions, including network and application security, identity and access management, and security incident response, necessary for effective implementation and troubleshooting
- Experience in vendor management and contract negotiations, vital for securing third-party services and products
- Previous experience in a regulated environment, with a thorough understanding of its specific requirements and nuances
- Strong project management skills and the ability to convey complex security concepts to non-technical stakeholders, essential for successful collaboration and project oversight
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
