Security Risk Assessment Architect

NTT DATA Services•Boston, MA

34d•$95,918 - $177,625•Remote

About The Position

NTT DATA is hiring a Security Risk Assessment Architect to conduct technology risk assessments covering technologies such as enterprise resource planning (ERP), custom applications, commercial off-the-shelf (COTS) products, AI, and full-stack systems. The role assesses applications, systems, infrastructure, cloud environments, and third-party arrangements, documents findings in risk reports, and communicates risks to business and technical leadership. The architect represents the Cyber & Information Security risk assessment function when reviewing contracts, application designs, and integration plans. The position is remote, with a strong preference for candidates based in Boston, Massachusetts; candidates selected from other locations should expect to travel to Boston several times per month. The role supports confidentiality, integrity, and availability of enterprise information and systems. It requires security architecture and technology risk assessment experience, familiarity with information security, compliance, policy, risk management, and remediation, and the ability to identify and lead security-control and process improvements. The architect also creates team documentation, troubleshoots problems independently, uses hands-on security tools, and explains complex technical issues to non-technical colleagues and business executives. The U.S.-based starting pay range is $95,918–$177,625. The position may also be eligible for incentive compensation based on individual and/or company performance. Benefits include medical, dental, and vision insurance with an employer contribution; flexible spending or health savings accounts; life and AD&D insurance; short- and long-term disability coverage; paid time off; employee assistance; and participation in a 401(k) program with company match, as well as additional voluntary or legally required benefits.

Requirements

At least 8 years of experience in security architecture.
At least 8 years of experience with technology risk assessment.
Strong knowledge of systems and security considerations.
Knowledge of information security, compliance, policy, risk management, and remediation.

Nice To Haves

Experience with application and infrastructure security, gold imaging, data protection, advanced threat protection, identity and access management, and integrated technologies with cross-functional impact.
Familiarity with frameworks such as MITRE and OWASP.
Broad knowledge of commonly used information security concepts, best practices, and standards.
Strong collaboration, facilitation, and negotiation skills.
Strong written and verbal communication skills.
Familiarity with the HIPAA Security Rule and other regulatory requirements.
Proven analytical and problem-solving abilities.
Project and program management planning and organizational skills.
Customer-service focus.
Time-management and prioritization skills.

Responsibilities

Assess technology risks across technologies such as ERP, custom applications, COTS, AI, and full-stack systems.
Conduct risk assessments of applications, systems, infrastructure, cloud environments, and third-party arrangements.
Document identified risks in reports and communicate them effectively to business and technical leadership.
Represent the Cyber & Information Security risk assessment services function when reviewing contracts, application designs, and integration plans.
Create documentation in support of the risk assessment services team.
Identify and lead efforts to correct security controls and improve processes.
Help ensure the confidentiality, integrity, and availability of information residing on or transmitted through enterprise devices, servers, systems, and data repositories.
Identify process improvements and develop plans to meet or exceed security best practices.
Explain complex technical issues to non-technical colleagues and business executives.
Troubleshoot and independently solve problems as they arise.
Use hands-on security tools.