Security Architect

Informa Group Plc.•Newton, MA

2d•$175,000 - $200,000•Hybrid

About The Position

Informa TechTarget is seeking a strategic Security Architect to define and drive cloud and enterprise security architecture. The role owns the security architecture vision, establishes governance frameworks, and partners with Product, Engineering, and Infrastructure teams to embed security across the technology ecosystem. It is based in the Newton, MA office, with in-person work expected three or more days per week and flexibility to work from home or remotely at other times. The Security Architect will shape enterprise security architecture and roadmaps across cloud, hybrid, and on-premises environments; establish security principles, frameworks, and standards; and report strategy, metrics, and security posture to executive leaders. The role also leads cloud and infrastructure security architecture across AWS and GCP, manages security platforms, and advances IAM, Zero Trust, network security, and threat detection. The position leads Secure SDLC and DevSecOps initiatives, integrates security into CI/CD pipelines, and guides development and operations teams in secure design and coding practices. It also provides security leadership for emerging technologies, including AI and LLM initiatives, and leads incident response, security assessments, and remediation planning.

Requirements

Bachelor’s or master’s degree in computer science, information technology, or a related field.
At least 7 years of cybersecurity experience with deep cloud security expertise.
Proven track record leading enterprise security architecture in multi-cloud environments.
Deep understanding of AWS and GCP cloud security best practices.
Expertise in web application security testing, including identifying and mitigating vulnerabilities using methodologies and tools such as OWASP.
Experience detecting and addressing vulnerabilities in network configurations and infrastructure.
Proficiency securing containerized environments, including Docker and Kubernetes, with tools or practices such as Trivy or Aqua Security.
Familiarity with industry-standard vulnerability scanning, penetration testing, and security auditing tools and platforms.
Ability to lead security discussions with system architects and business leaders.
Strong analytical and computer skills.
Expert-level understanding of cybersecurity and its impact on modern business.
Thorough understanding of Unix operating systems.
Awareness of frameworks such as NIST, COBIT, ISO, and SOC 2.
Knowledge of automated threat detection, centralized logging and SIEM, least privilege architecture, VPC design and perimeter controls, data exfiltration prevention, encryption and key management, and IAM best practices.

Nice To Haves

CISSP, CCSP, AWS Security Specialty, or Google Professional Cloud Security Engineer certification.

Responsibilities

Own and evolve enterprise security architecture, long-term roadmaps, and reference architectures for cloud, hybrid, and on-premises environments.
Define security principles, frameworks, and standards aligned with business objectives and regulatory requirements.
Develop and present security strategies, roadmaps, and initiatives to executive leadership and stakeholders.
Establish security metrics and KPIs and communicate architecture effectiveness and security posture to senior leadership.
Ensure compliance with ISO 27001, SOC 2, GDPR, and SOX; lead audits and assessments and drive remediation and continuous improvement.
Own cloud security architecture across AWS and GCP, including CSPM, CIEM, and Wiz remediation strategies.
Design IAM architecture based on least privilege and Zero Trust principles.
Architect network segmentation and defense-in-depth controls across infrastructure layers.
Own the architecture and strategic direction of SIEM, vulnerability management, endpoint security, and threat detection platforms.
Manage and optimize internal security platforms and design secure cloud and hybrid infrastructure protections.
Conduct threat modeling and risk analyses to identify infrastructure vulnerabilities and recommend mitigations.
Lead Secure SDLC and DevSecOps initiatives and integrate security controls into CI/CD pipelines.
Ensure software architecture and applications mitigate vulnerabilities and prevent exploits.
Guide development and DevOps teams on secure coding practices and emerging threats.
Collaborate with cross-functional teams to embed security throughout the system development lifecycle and define security requirements that support agile development.
Lead security architecture for emerging technologies, including AI and LLM initiatives, and advise on security technologies and risks associated with proposed changes.
Monitor emerging threats, vulnerabilities, and technologies and drive innovation in security practices.
Influence engineering teams to adopt security principles and security-first practices; mentor DevOps, operations, and development teams.
Partner with Product, Engineering, and Infrastructure leaders to align security architecture with business innovation.
Produce security documentation, architecture diagrams, design specifications, and security control matrices.
Lead incident response management and develop security policies to protect organizational assets.
Identify vulnerabilities and weaknesses through systematic assessments and recommend and implement controls that balance security with business enablement.

Benefits

Up to four days per year to volunteer with a philanthropic organization.
Bespoke training and learning, mentoring platforms, and on-demand access to thousands of LinkedIn Learning courses.
Open Vacation, 10 national holidays, and the opportunity to work from almost anywhere for up to four weeks a year.
401(k) match.
Health, vision, and dental insurance.
Parental leave.
Employee stock purchase plan offering company shares at a minimum 15% discount.
EAP assistance, mental health first aiders, and free access to a wellness app.
Global awards and recognition programs.
Colleague groups and networks, social events, and a collaborative work environment.