Security Architect

Navy Mutual•Arlington, VA

About The Position

The Security Architect develops and maintains a security architecture process that enables the enterprise to develop and implement security solutions and capabilities that are clearly aligned with business, technology, and threat drivers. This role works cooperatively with all staff to meet the business and customer needs of Navy Mutual, while managing processes and methods for auditing and addressing information security standards, and facilitates the migration of non-compliant environments to compliant environments. The Security Architect informs and conducts security audits within and outside the organization to ensure compliance with standards and currency with industry security norms. This role manages and participates in the planning and implementation of security administration for all IT projects and makes recommendations and assists in the implementation of changes to work methods and procedures to make them more effective or to strengthen security measures. The Security Architect develops security strategy plans and roadmaps based on sound enterprise architecture practices and develops and maintains security architecture artifacts (e.g., models, templates, standards, and procedures) that can be used to leverage security capabilities in projects and operations. This role determines baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation, and identity and access management (IAM). The Security Architect participates in the design and execution of back-up disaster recovery systems and contingency operations, and participates in systems back-up regimens as needed. This role creates and maintains a security training program and performs regular security awareness training for all employees to educate and ensure compliance with the organization’s security policies, standards, and procedures. The Security Architect is responsible for maintaining project software and documentation inventory and configuration baselines. This role establishes and maintains all CM processes and procedures, including library and software development information, impact assessments, incident reports, and software change notices, etc., on a continuous basis. The Security Architect identifies and implements processes to strengthen, streamline, and automate build processes and serves as an advocate for best practices to drive the development and maintenance of build automation tools. This role maintains operational configurations of all in-place solutions as per the established baseline control efforts, using automated CM tools. The Security Architect is responsible for change management controls and reporting/documentation. This role manages relationships with contractors and vendors as needed. The Security Architect establishes a taxonomy of indicators of compromise (IOCs) and shares this detail with other security colleagues, including the security operations center (SOC), information security managers and analysts, as well as counterparts within the network operations center (NOC). Other duties as assigned.

Requirements

Develops and maintains a security architecture process
Manages processes and methods for auditing and addressing information security standards
Facilitates migration of non-compliant environments to compliant environments
Informs and conducts security audits
Manages and participates in the planning and implementation of security administration for all IT projects
Makes recommendations and assists in the implementation of changes to work methods and procedures
Develops security strategy plans and roadmaps
Develops and maintains security architecture artifacts
Determines baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation and identity and access management (IAM)
Participate in the design and execution of the back-up disaster recovery systems, and contingency operations
Participates in systems back-up regimen
Create and maintain a security training program
Perform regular security awareness training for all employees
Responsible for maintaining project software and documentation inventory and configuration baselines
Establishes and maintains all CM processes and procedures
Identifies and implements processes to strengthen, streamline and automate build processes
Serve as an advocate for best practices to drive the development and maintenance of build automation tools
Maintain operational configurations of all in-place solutions
Responsible for change management controls and reporting/documentation
Manage relationships with contractors and vendors

Nice To Haves

Security operations center (SOC)
Information security managers and analysts
Network operations center (NOC)

Responsibilities

Develops and maintains a security architecture process that enables the enterprise to develop and implement security solutions and capabilities that are clearly aligned with business, technology and threat drivers.
Works cooperatively with all staff to meet the business and customer needs of Navy Mutual, while managing processes and methods for auditing and addressing information security standards; and facilitates migration of non-compliant environments to compliant environments.
Informs and conducts security audits within and outside the organization, to ensure compliance with standards and currency with industry security norms.
Manages and participates in the planning and implementation of security administration for all IT projects; and makes recommendations and assists in the implementation of changes to work methods and procedures to make them more effective or to strengthen security measures.
Develops security strategy plans and roadmaps based on sound enterprise architecture practices.
Develops and maintains security architecture artifacts (e.g., models, templates, standards and procedures) that can be used to leverage security capabilities in projects and operations.
Determines baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation and identity and access management (IAM).
Participate in the design and execution of the back-up disaster recovery systems, and contingency operations; and participates in systems back-up regimen as needed.
Create and maintain a security training program, and perform regular security awareness training for all employees, to educate and ensure compliance with the organization’s security policies, standards, and procedures.
Responsible for maintaining project software and documentation inventory and configuration baselines.
Establishes and maintains all CM processes and procedures; including library and software development information, impact assessments, incident reports, and software change notices, etc.; on a continuous basis.
Identifies and implements processes to strengthen, streamline and automate build processes; and serve as an advocate for best practices to drive the development and maintenance of build automation tools.
Maintain operational configurations of all in-place solutions as per the established baseline control efforts, using automated CM tools.
Responsible for change management controls and reporting/documentation.
Manage relationships with contractors and vendors as needed.
Establishes a taxonomy of indicators of compromise (IOCs) and share this detail with other security colleagues, including the security operations center (SOC), information security managers and analysts, as well as counterparts within the network operations center (NOC).
Other duties as assigned.