Information Security Architect

Drexel University•Philadelphia, PA

1d•$99,720 - $149,580•Onsite

About The Position

Reporting to the Director of IT Security and working closely with the campus community and outside parties, the information security architect protects the people, the information, and the systems of Drexel University through the design, implementation, and support of security architecture and programs.

Requirements

Minimum of a Master's Degree in computer science, information systems, or a related field, or the equivalent combination of education and work experience.
Minimum of 3 years of experience experience in information security or 5 total years of experience in information technology, with at least 1 focusing on information security.
Mastery of and experience with 4 or more of the following functions: Management of information security technologies to protect information, networks, servers, endpoints, and cloud services (e.g., firewalls, antivirus, encryption, data leak prevention, security information and event management systems, and intrusion detection and prevention systems); Risk assessment and third-party/vendor security management; Vulnerability and threat management; Incident detection, documentation, response, and remediation; Identity management; Application of information security and privacy laws, regulations and guidelines, (e.g., data breach state laws, FERPA, HIPAA, NIST, PCI-DSS, DFARS, and GDPR)

Responsibilities

Support the Director of IT Security’s work on leadership, strategy, policy, risk management, disaster recovery, business continuity, compliance, external relations, and emerging technologies and threats.
Lead and oversee vulnerability and risk management activities, including identification, prioritization, and coordination of remediation efforts.
Guide the evaluation and management of third-party vendors, consultants, and related risk assessment activities.
Provide expertise in incident response, forensics, and threat detection, including advising on response strategies and improvements.
End-point security, including encryption at rest.
Network security, including encryption in transit.
Cloud computing and software contracts.
Support coordination and continuous improvement of security operations and monitoring capabilities.
Other duties as assigned