Enterprise Cybersecurity Architect

BOK Financial•Tulsa, OK

8d•Onsite

About The Position

The Enterprise Cybersecurity Architect designs, develops, and implements BOKF’s cybersecurity systems architecture. The role aligns cybersecurity strategy with business strategy by establishing, monitoring, and enforcing cybersecurity policies and protocols. It partners with business and IT stakeholders to understand business and technical needs, balance those needs with information and cybersecurity requirements, and align security standards and frameworks with business and technology strategy. The architect uses broad knowledge of security principles and technologies to assess risks in current systems, recommend improvements and updates to existing architecture, and advise on security architecture for new systems. The role also serves as a subject matter expert, strategic partner, and trusted advisor across enterprise projects and domains, and works with technology vendors to validate security capabilities in BOKF’s environment.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, or a related technical or business discipline, or an equivalent combination of education and experience.
Achieved or working toward CISSP or another industry-recognized certification, such as CISM or GIAC.
Five to seven years of progressively increasing responsibility and achievement in Information Technology/Cybersecurity, and/or at least seven years developing and implementing cybersecurity strategies compliant with relevant NIST standards and ISO 27001.
Strong understanding of cyber defense vulnerability assessment technologies and their capabilities.
Strong understanding of application or software security, including dynamic application security testing, secure code review, and secure static code analysis.
Experience leading security consulting engagements in enterprise environments.
Experience designing security controls based on cybersecurity principles.
Proficiency with API/web services, scripting languages, relational database management systems (RDBMS), and cloud services such as AWS or Azure.
Experience with DevOps pipeline tools, systems architectures, and the software development lifecycle.
Knowledge of common network security and encryption tools and devices.
Knowledge of project management methodologies and applications, such as SCRUM, XP, or SAFe Agile.
Knowledge of banking systems and business practices.
Ability to apply methods, standards, and approaches for describing, analyzing, and documenting an organization’s enterprise IT architecture.
Ability to apply network security architecture concepts, including topology, protocols, components, and principles such as defense-in-depth.
Ability to serve as the primary liaison between the enterprise architect and systems security engineer, and coordinate with system owners, common control providers, and system security officers on allocating security controls as system-specific, hybrid, or common controls.

Responsibilities

Partner with line-of-business leaders to understand business and technical needs and develop solutions that balance business requirements with information and cybersecurity requirements.
Align security standards, frameworks, and practices with business and technology strategy.
Determine and develop enterprise-wide application security standards, patterns, shared components, and architecture blueprints for secure integration and data exchange among applications, clients, and vendors.
Develop and maintain reusable security artifacts, including models, patterns, and templates, for new initiatives and operations.
Serve as a subject matter expert, strategic partner, and trusted advisor to projects and domains across the enterprise.
Develop and maintain technology and product roadmaps, next-generation strategies and deployment models, and financial planning models.
Partner with business and IT leaders to initiate work and allocate resources needed to deploy project roadmaps.
Track changes in business, technology, and threat environments and ensure they are addressed in BOKF’s cybersecurity strategy.
Analyze emerging security threats and vulnerabilities, identify gaps in existing and proposed architectures, and recommend changes or enhancements.
Partner with technology vendors to ensure security capabilities are tested and validated in the BOKF environment.
Create performance metrics and traceability maps to determine and monitor the effectiveness of architecture solutions.
Advise on countermeasures that protect BOKF systems from unauthorized access.
Analyze current system risks and recommend improvements and updates to existing system architecture, as well as security architecture for new systems.