AVP, Security Architect

LPL Financial•Charlotte, NC

About The Position

LPL Financial’s Information Security team is seeking an AVP, Security Architect to contribute to security architecture efforts involving mergers and acquisitions, data, cloud, and on-premises environments. The role partners with Development, Operations, business units, and Enterprise Architecture teams to help ensure LPL’s environments are secured and monitored. The position calls for a broad technical security background, particularly in security design, detection, prevention, and response to security threats. The AVP supports the maturity of network, infrastructure, and data security capabilities; provides subject matter expertise; and creates security architecture designs, patterns, and standards. The role also works with architects and cybersecurity teams to define, communicate, and validate security requirements, review solutions, address risks, and mitigate emerging threats.

Requirements

At least 6 years of experience in information security and IT risk management, with prior technical experience in an infrastructure or systems role.
At least 2 years of experience working on M&A integrations.
At least 5 years of working knowledge of information security controls, guidelines, and standards, such as the ISO 27000 series, OWASP, CSA CCM, CIS 20 Critical Security Controls, SOX, and NIST.
Self-driven, flexible, and adept at consulting, negotiating, communicating, building consensus, and presenting.
Ability to remain calm under pressure while managing multiple tasks.
Demonstrated ability to learn from mistakes and apply constructive feedback to improve performance.

Nice To Haves

CCSP, another cloud-specific certification, CISSP, and/or GIAC certification.
In-depth knowledge of AWS and core services including EC2, S3, IAM, and VPC, as well as security services and features such as security groups, ACLs, AWS Security Hub, and AWS WAF.
Working knowledge of Terraform, CloudFormation, Pulumi, and/or Ansible.
Solid experience securing scalable web architectures and distributed systems.
Solid understanding of malware, emerging threats, attacks, and vulnerability management.

Responsibilities

Support efforts to mature LPL Financial’s network, infrastructure, and data security capabilities.
Serve as a subject matter expert and provide guidance on industry best practices.
Support M&A integrations, secure design, and solution implementation.
Create infrastructure and data security architecture designs and patterns using industry reference architectures and standards.
Collaborate with Data and Enterprise Architects on data-protection methods such as masking and tokenization, considering the pros and cons of each security control.
Document, socialize, maintain, and train key stakeholders on security requirements for secure solution design and development.
Identify cybersecurity issues, strengths, and weaknesses across cyber domains and partner organizations, assess resulting risks, and provide solutions.
Develop, review, and approve cybersecurity standards; align security requirements with partner cyber-domain teams and organizations; and track and validate controls.
Participate in and drive security advisory boards and committees, providing security architecture reviews and process ownership for new and existing solutions.
Analyze the potential impact of new threats and exploits, develop and implement mitigation solutions, and communicate risks to relevant business units.