Security Risk Assessment Architect - Remote US
About The Position
NTT DATA is seeking a Security Risk Assessment Architect to join their team. This role is responsible for technology risk assessments across various technologies, ensuring the confidentiality, integrity, and availability of information. The architect will conduct risk assessments on applications, systems, infrastructure, cloud environments, and third-party arrangements, documenting identified risks and communicating them to leadership. They will also represent the Cyber & Information Security risk assessment services function, create documentation, and lead efforts to improve security controls and processes. The role requires explaining complex technical issues to non-technical audiences and independently solving problems.
Requirements
- 8+ years of experience in security architecture
- 8+ years of experience with Technology Risk Assessment
- Experience with Hands-on Security Tools
Nice To Haves
- Experience with application and infrastructure security and gold imaging, data protection; advance threat protection; identity and access management; integrated technologies with cross-functional impact
- Familiar with frameworks like MITRE and OWASP
- Broad knowledge of commonly used information security concepts, best practices, and standard
- Strong collaboration, facilitation, and negotiation skills.
- Strong communication skills, both written and verbal.
- Familiarity with HIPAA Security Rule and other regulatory requirements
- Proven analytical and problem-solving abilities
- Project and program management planning and organizational skills
- Customer service focused
- Time management and prioritization
Responsibilities
- Technology Risk assessment for technologies around EPR, Custom App, COTS, AI, Full stack, etc.
- Great knowledge of System and security consideration
- Knowledge of information security, compliance, policy, risk management, and remediation
- Identifying process improvements and developing plans to meet or exceed security best practices
- Ensure the confidentiality, integrity, and availability of the information residing on or transmitted to/from/through the enterprise’s devices, servers, and other systems and data repositories
- Conduct risk assessments on various applications, systems, infrastructure, cloud-environments, and third-party arrangements. Document identified risk through a risk report to be effectively communicated shared with business and/or technical leadership
- Confidently represent the Cyber & Information Security risk assessment services function with reviewing and assessing contracts, application designs, integration plans, etc.
- Create documentation in support of the risk assessment services team
- Self-directed; expected to identify and lead efforts to correct security controls and/or process improvements
- Explain complex technical issues to non-technical colleagues and business executives
- Troubleshoot and independently solve problems as they arise
Benefits
- medical, dental, and vision insurance with an employer contribution
- flexible spending or health savings account
- life and AD&D insurance
- short and long term disability coverage
- paid time off
- employee assistance
- participation in a 401k program with company match
- additional voluntary or legally-required benefits
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
