Director Security Architecture

HEB•San Antonio, TX

11h

About The Position

The Director of Security Architecture will lead the design and implementation of robust security frameworks, strategies, and solutions to protect the organization's information assets. This role involves overseeing the development of security policies, standards, and guidelines, and ensuring the integration of security best practices into all aspects of the organization's technology infrastructure. The Director of Security Architecture will work closely with various teams, including IT, engineering, compliance, and business units, to ensure a comprehensive and cohesive approach to information security. Key Responsibilities: Strategic Leadership: Develop and execute a strategic security architecture roadmap aligned with the organization’s goals and objectives. Provide leadership and direction to the security architecture team, fostering a culture of innovation and continuous improvement. Security Design and Implementation: Design and implement robust security architectures for on-premises and cloud-based systems. Oversee the integration of security controls into development and operational processes. Ensure that security architectures address regulatory, legal, and business requirements. Policy and Standards Development: Develop, implement, and maintain security policies, standards, and guidelines. Ensure that security policies and standards are aligned with industry best practices and regulatory requirements. Risk Management: Conduct security risk assessments and provide recommendations for mitigating risks. Collaborate with risk management teams to ensure comprehensive risk management strategies. Collaboration and Communication: Work closely with IT, engineering, compliance, and business units to integrate security into the design and implementation of systems and processes. Communicate security strategies and initiatives to senior leadership and stakeholders. Technology and Innovation: Stay abreast of emerging security technologies and trends. Evaluate and recommend new security technologies and tools to enhance the organization’s security posture. Compliance and Audit: Ensure compliance with relevant regulatory requirements and industry standards. Support internal and external audits related to security architecture and controls.

Requirements

Bachelor’s degree in Computer Science, Information Security, or a related field.
10+ years of experience in information security, with a focus on security architecture.
5+ years of leadership experience in a security architecture or related role.
Proven experience in designing and implementing security solutions for large-scale organizations.
Deep understanding of security architecture frameworks and methodologies.
Expertise in cloud security, network security, application security, and data protection.
Strong knowledge of regulatory requirements and industry standards (PCI, HIPAA, etc).
Excellent leadership, communication, and collaboration skills.
Ability to effectively manage multiple projects and priorities in a fast-paced environment.

Nice To Haves

Master’s degree preferred.
Relevant certifications such as CISSP, CISM, CCSP, or equivalent are highly desirable.

Responsibilities

Develop and execute a strategic security architecture roadmap aligned with the organization’s goals and objectives.
Provide leadership and direction to the security architecture team, fostering a culture of innovation and continuous improvement.
Design and implement robust security architectures for on-premises and cloud-based systems.
Oversee the integration of security controls into development and operational processes.
Ensure that security architectures address regulatory, legal, and business requirements.
Develop, implement, and maintain security policies, standards, and guidelines.
Ensure that security policies and standards are aligned with industry best practices and regulatory requirements.
Conduct security risk assessments and provide recommendations for mitigating risks.
Collaborate with risk management teams to ensure comprehensive risk management strategies.
Work closely with IT, engineering, compliance, and business units to integrate security into the design and implementation of systems and processes.
Communicate security strategies and initiatives to senior leadership and stakeholders.
Stay abreast of emerging security technologies and trends.
Evaluate and recommend new security technologies and tools to enhance the organization’s security posture.
Ensure compliance with relevant regulatory requirements and industry standards.
Support internal and external audits related to security architecture and controls.