Enterprise Cybersecurity Architect

BOK Financial•Tulsa, OK

6d•Onsite

About The Position

The Enterprise Cybersecurity Architect designs, develops, and implements BOKF’s cybersecurity systems architecture. The role aligns cybersecurity strategy with business strategy by establishing, monitoring, and enforcing cybersecurity policies and protocols. Working with business and IT stakeholders, the architect develops solutions that balance business and technical needs with information and cybersecurity requirements, and aligns security standards and frameworks with the organization’s business and technology strategies. The architect evaluates BOKF and vendor hardware and software to assess system risks, recommend improvements to existing architecture, and define security architecture for new systems. The position also establishes enterprise application security standards and reusable architecture artifacts, advises projects and business domains, develops technology roadmaps and deployment strategies, and monitors evolving business, technology, and threat environments. The role partners with technology vendors to validate security capabilities, measures architecture effectiveness, and advises on countermeasures to protect BOKF systems from unauthorized access.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or a related technical or business discipline, or an equivalent combination of education and experience.
Achieved or working toward CISSP or another industry-recognized certification, such as CISM or GIAC.
Five to seven years of progressively increasing responsibility and achievement in Information Technology or Cybersecurity, and/or at least seven years developing and implementing cybersecurity strategies compliant with relevant NIST standards and ISO 27001.
Strong understanding of cyber defense vulnerability assessment technologies and their capabilities.
Strong understanding of application or software security, including dynamic application security testing, secure code review, and secure static code analysis.
Experience leading security consulting engagements in enterprise environments.
Experience designing security controls based on cybersecurity principles.
Proficiency with APIs and web services, scripting languages, relational database management systems, and cloud services such as AWS and Azure.
Experience with DevOps pipeline tools, systems architectures, and the software development lifecycle.
Knowledge of common network security and encryption tools and devices.
Knowledge of project management methodologies and their application, including SCRUM, XP, and/or SAFe Agile.
Knowledge of banking systems and business practices.
Ability to apply methods, standards, and approaches for describing, analyzing, and documenting enterprise IT architecture.
Ability to apply network security architecture concepts, including topology, protocols, components, and principles such as defense-in-depth.
Ability to serve as the primary liaison between the enterprise architect and systems security engineer and coordinate security control allocation with relevant system stakeholders.

Responsibilities

Partner with line-of-business leaders to understand business and technical needs and create solutions that balance business requirements with information and cybersecurity requirements.
Align security standards and frameworks with overall business and technology strategy.
Develop enterprise-wide application security standards, patterns, shared components, and architecture blueprints for secure integration and data exchange among applications, clients, and vendors.
Develop and maintain reusable security artifacts, including models, patterns, and templates.
Serve as a subject matter expert, strategic partner, and trusted advisor to projects and domains across the enterprise.
Develop and maintain technology and product roadmaps, next-generation strategies and deployment models, and financial planning models.
Partner with business and IT leaders to initiate work and allocate resources for roadmap deployments.
Track changes in business, technology, and threat environments and ensure they are addressed in BOKF’s cybersecurity strategy.
Analyze emerging security threats and vulnerabilities, identify gaps in existing and proposed architectures, and recommend changes or enhancements.
Partner with technology vendors to ensure security capabilities are tested and validated in the BOKF environment.
Create performance metrics and traceability maps to assess and monitor the effectiveness of architecture solutions.
Advise on countermeasures to protect BOKF systems from unauthorized access.
Coordinate with enterprise architects, systems security engineers, system owners, common control providers, and system security officers on security control allocation.