Security Risk Assessment Architect
About The Position
NTT DATA is hiring a Security Risk Assessment Architect to conduct technology risk assessments across a range of technologies, including enterprise resource planning (ERP), custom applications, commercial off-the-shelf (COTS) products, AI, and full-stack environments. The role requires strong knowledge of systems and security considerations, information security, compliance, policy, risk management, and remediation. The architect assesses applications, systems, infrastructure, cloud environments, and third-party arrangements, documents identified risks in reports for business and technical leadership, and represents the Cyber & Information Security risk assessment function when reviewing contracts, application designs, and integration plans. The role also creates supporting documentation, identifies and leads security-control and process improvements, and helps ensure the confidentiality, integrity, and availability of enterprise information. The position is based in Boston, Massachusetts, with a strong preference for local candidates. Candidates who are not local should expect to travel to Boston several times per month. The posting also describes this as a remote role and notes that remote or hybrid arrangements may be subject to client and business requirements.
Requirements
- At least 8 years of experience in security architecture.
- At least 8 years of experience with technology risk assessment.
- Strong knowledge of systems and security considerations.
- Knowledge of information security, compliance, policy, risk management, and remediation.
- Experience with hands-on security tools.
- Ability to explain complex technical issues to non-technical colleagues and business executives.
- Ability to work independently and lead security-control or process-improvement efforts.
Nice To Haves
- Experience with application and infrastructure security, gold imaging, data protection, advanced threat protection, identity and access management, and integrated technologies with cross-functional impact.
- Familiarity with frameworks such as MITRE and OWASP.
- Broad knowledge of commonly used information security concepts, best practices, and standards.
- Strong collaboration, facilitation, and negotiation skills.
- Strong written and verbal communication skills.
- Familiarity with the HIPAA Security Rule and other regulatory requirements.
- Proven analytical and problem-solving abilities.
- Project and program management, planning, and organizational skills.
- Customer-service focus.
- Time-management and prioritization skills.
Responsibilities
- Assess technology risks across ERP, custom applications, COTS products, AI, full-stack environments, and other technologies.
- Conduct risk assessments of applications, systems, infrastructure, cloud environments, and third-party arrangements.
- Document identified risks in reports and communicate them effectively to business and technical leadership.
- Represent the Cyber & Information Security risk assessment services function in reviews of contracts, application designs, and integration plans.
- Develop documentation in support of the risk assessment services team.
- Identify and lead efforts to correct security controls and improve processes.
- Identify process improvements and develop plans to meet or exceed security best practices.
- Help ensure the confidentiality, integrity, and availability of information residing on or transmitted through enterprise devices, servers, systems, and data repositories.
- Explain complex technical issues to non-technical colleagues and business executives.
- Troubleshoot and independently solve problems as they arise.
Benefits
- Medical, dental, and vision insurance with an employer contribution.
- Flexible spending or health savings account.
- Life and AD&D insurance.
- Short- and long-term disability coverage.
- Paid time off.
- Employee assistance.
- Participation in a 401(k) program with company match.
- Additional voluntary or legally required benefits.
- The position may be eligible for incentive compensation based on individual and/or company performance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
