Principal Infrastructure Security Architect (CIO)

Early Warning® • Chicago, IL

3d • $184,000 - $276,000 • Hybrid

About The Position

This position leads Security Architecture consultation with IT, Project Management, Product Management, Software Development and other peers on proper security architecture and system development processes to ensure the systems implemented are in line with security best practices and Early Warning Services policies and standards. Positions located in Scottsdale, San Francisco, Chicago, or New York follow a hybrid work model to allow for a more collaborative working environment. Candidates responding to this posting must independently possess the eligibility to work in the United States, for any employer, at the date of hire. This position is ineligible for employment Visa sponsorship.

Requirements

• Bachelor’s degree in computer science, Engineering, Math, or Physical Science.
• Minimum 2 years of general IT experience.
• Minimum 4 years of IT security experience.
• Minimum 4 years of Security Architecture or Consulting experience.
• Subject Matter expert in focused Infrastructure Security skill or silo.
• Expert knowledge of relational databases, Windows and Linux operating systems, and networking solutions.
• Effective interpersonal skills, with ability to present to peers, coworkers, and customers.
• Expert knowledge of operating system, application, network, and database security architectures.
• Proficiency in Infrastructure Security.
• Delivered talks or published whitepapers at regional Security Conferences.
• CEH/CPT, or CISSP or Network Certification and one of Advanced Network or Infrastructure Cert, or PHD or MBA in InfoSec or equivalent certification.
• Expert experience in analyzing technical issues and making recommendations for corrective action.
• Expert experience developing and delivering risk mitigation solutions.
• Expert experience designing and implementing complex process and procedure.
• Demonstrate expert understanding in the field of Information Security in terms of both concepts and technology.
• Expertise in securing SaaS and Cloud based systems.
• Background and drug screen.

Nice To Haves

• MCSE, SCSA, CCNA or CISA certification.
• Additional related education and/or experience preferred.
• Familiarity with and Secure Access devices.
• Familiarity with NetSec tools: IPS, Scanners, Firewalls.

Responsibilities

• Leads the Identification, measurement, and minimization of security risks to information systems across a broad range of disciplines including network and host security.
• Drives evaluating the current methods in use by Early Warning to access and process data via Early Warning customer facing applications.
• Owns the development of repeatable architectures working with internal and external partners to ensure that systems are placed within the relevant security zones based on the data they house and their purpose.
• Serves as the subject matter expert point of contact for all security issues in assigned areas.
• Leads security efforts with architecture teams to ensure that all newly developed and legacy infrastructure implementations are in line with security policy and are compliance to the required frameworks (ISO, PCI, NIST 800-53, etc.).
• Advises and approves of changes and architectures for assigned areas from a security perspective.
• Evaluates and drives decisions for product business cases including functional and detailed design specs to ensure security standards are met.
• Assists and leads the security incident response process as assigned.
• Advises as the subject matter expert and contributes to the development of Early Warning security policy and procedures.
• Develops and owns architectural reference material to ensure that security practices are being implemented in a repeatable fashion every time a new project is implemented.
• Leads efforts that document and present risks and security issues that could impact the confidentiality, integrity and/or availability of the business (both internally and externally) by assisting in documentation, tracking, and creating solutions for mitigation.
• Work with internal and external penetration testing organizations to coordinate application and network-based penetration.
• Leads information security efforts.
• Mentors new security team members.
• Interacts with customer banks to gather yearly testing and security requirements, reviews penetration testing findings, mitigating controls and/or projects to rectify security vulnerabilities.
• Support the company's commitment to protect the integrity and confidentiality of systems and data.

Benefits

• Healthcare Coverage – Competitive medical (PPO/HDHP), dental, and vision plans as well as company contributions to your Health Savings Account (HSA) or pre-tax savings through flexible spending accounts (FSA) for commuting, health & dependent care expenses.
• 401(k) Retirement Plan – Featuring a 100% Company Safe Harbor Match on your first 6% deferral immediately upon eligibility.
• Paid Time Off – Flexible Time Off for Exempt (salaried) employees, as well as generous PTO for Non-Exempt (hourly) employees, plus 11 paid company holidays and a paid volunteer day.
• 12 weeks of Paid Parental Leave
• Maven Family Planning – provides support through your Parenting journey including egg freezing, fertility, adoption, surrogacy, pregnancy, postpartum, early pediatrics, and returning to work.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal