Security Risk Assessment Architect

NTT DATA Services•Boston, MA

2d•$95,918 - $177,625•Remote

About The Position

NTT DATA is seeking a Security Risk Assessment Architect to join their team in Boston, Massachusetts. This role involves conducting technology risk assessments for various systems including EPR, custom applications, COTS, AI, and full-stack technologies. The architect will ensure the confidentiality, integrity, and availability of information, document identified risks, and represent the Cyber & Information Security risk assessment services function. The position requires creating documentation, identifying and leading efforts to correct security controls and process improvements, explaining complex technical issues to non-technical audiences, and troubleshooting independently. Experience with hands-on security tools is also expected.

Requirements

8+ years of experience in security architecture
8+ years of experience with Technology Risk Assessment
Experience with Hands-on Security Tools

Nice To Haves

Experience with application and infrastructure security and gold imaging, data protection; advance threat protection; identity and access management; integrated technologies with cross-functional impact
Familiar with frameworks like MITRE and OWASP
Broad knowledge of commonly used information security concepts, best practices, and standard
Strong collaboration, facilitation, and negotiation skills.
Strong communication skills, both written and verbal.
Familiarity with HIPAA Security Rule and other regulatory requirements
Proven analytical and problem-solving abilities
Project and program management planning and organizational skills
Customer service focused
Time management and prioritization

Responsibilities

Technology Risk assessment for technologies around EPR, Custom App, COTS, AI, Full stack, etc.
Great knowledge of System and security consideration
Knowledge of information security, compliance, policy, risk management, and remediation
Identifying process improvements and developing plans to meet or exceed security best practices
Ensure the confidentiality, integrity, and availability of the information residing on or transmitted to/from/through the enterprise’s devices, servers, and other systems and data repositories
Conduct risk assessments on various applications, systems, infrastructure, cloud-environments, and third-party arrangements. Document identified risk through a risk report to be effectively communicated shared with business and/or technical leadership
Confidently represent the Cyber & Information Security risk assessment services function with reviewing and assessing contracts, application designs, integration plans, etc.
Create documentation in support of the risk assessment services team
Self-directed; expected to identify and lead efforts to correct security controls and/or process improvements
Explain complex technical issues to non-technical colleagues and business executives
Troubleshoot and independently solve problems as they arise