Cyber Security Architect

Encova Insurance•Columbus, OH

1d•Hybrid

About The Position

Encova Insurance is seeking a Cyber Security Architect to join us. The Security Architect plays a key role in protecting and enabling Encova by partnering closely with application development and product teams. This role focuses on integrating security principles, standards, and risk considerations into solution designs from early concept through implementation. This is a hybrid role with in office work for meetings and collaboration. You must reside in Columbus, Ohio. The strategic objective of the Cyber Security team is to protect and enable Encova. The Security Architect role will act as a liaison between Cyber Security and the application development product team(s) to ensure the proper attention to security principles, policies, and standards. A primary aspect of this role is to lead collaboration between development teams and Cyber Security from ideation to implementation. This role does not have operational responsibility for cybersecurity but must have a high-level understanding and be able to collaborate with developers and engineers to ensure solutions adhere to approved patterns or coordinate the creation of new patterns. This role requires strong understanding of business strategy, risk tolerance, and complex designs; all anchored in industry best practices and strong information security principles. The Security Architect leads technical teams through design ideation to approved implementation designs, and will help guide enterprise focused technology, roadmaps, standards, and process. Collaborating with other cross discipline architects, business leaders, and other subject matter experts to further the objective of protect and enable the enterprise.

Requirements

Bachelor’s degree in; Computer Science, Cybersecurity, Information Assurance, Software Engineering, MIS or equivalent experience.
Ideal candidate must be self-motivated and willing to assume responsibility to maintain their skills at an industry expert level in multiple technology disciplines.
Must be able to communicate effectively with business leaders and provide awareness of business capabilities enabled through technology solutions.
Able to effectively collaborate across multiple technology disciplines through sustained cross development or training effort, as well as vendor relationships.
Must understand Information security and cyber principles and practices, risk management methodologies, and common industry frameworks (NIST, ISO, CMMC, PCI, etc.).
Must be able to manage multiple priorities, delegate or lead initiatives and provide development or training recommendations.
Strong working knowledge of web-based systems architecture, service-based architecture, enterprise applications architecture, infrastructure as well as experience managing expectations when balancing against business and financial constraints.
Sustained awareness of emerging technologies related to area(s) of expertise.
Strong verbal and written communication skills are essential.

Nice To Haves

Insurance knowledge is strongly preferred.
Industry and vendor certifications strongly preferred.

Responsibilities

Maintain expert level competency in multiple information technology disciplines, i.e. cloud infrastructure, modern application architecture, integration(s), data management/data governance, service-oriented architecture, cyber security and risk management, etc.
Architect enterprise-level solutions and be able to explain the full burden of ownership related to various design considerations, especially regarding cybersecurity and risk management.
Serve as a trusted advisor to technology teams, business users and business partners through credible guidance and leadership.
Propose elegant technology solutions to achieve strategic business goals.
Collaborate and communicate with advanced technical resources and non-technical business users.
Research, design, plan, and guide enterprise implementations that drive business value, enable innovation and position the company for agile technology adoption In a secure fashion.
Assist in establishing enterprise roadmaps, standards, and continuous improvement practices.
Apply a working knowledge of desired strategic business capabilities and the related services and solutions supporting them.
Maintain a strong technical understanding of virtualization and cloud technologies
Have a strong technical aptitude for technology and information technology principles and frameworks (NIST CSF).
Create and maintain advanced technical documentation.
Prepare and present solutions and roadmaps to various technical and non-technical audiences.
Maintain awareness of emerging technologies and facilitate engagements that provide visibility to current and future technology capabilities.
Monitor and audit implementations against Encova security policy, industry or corporate best practices, approved standards and designs, and provide awareness and remediation recommendations to achieve desired end states.
Engage in sharing knowledge and provide cross training sessions with other members of the team.
Perform other duties as assigned.