Senior Data Security Architect

Texas Children's Hospital•Houston, TX

About The Position

We’re looking for a Senior Data Security Architect, someone who’s ready to grow with our company. In this position, you will be responsible for ensuring the confidentiality, availability, and integrity of IDS information assets, and protecting them from unauthorized disclosure, modification, and destruction. This position will develop and promote the Information Security Strategic Plan and IDS Information Security Policies, audit compliance with Security Policies, and lead remediation initiatives. Develops and maintains cybersecurity infrastructure and application standards. Participates in the IT Architecture Board. Monitors organization and IS administrators' compliance to established Security policy. Quarterly vulnerability reviews published to IS Management. Identify, track and manage outstanding vulnerabilities. Complex incident forensics spanning IDS. Confidential investigations such as HR events, internal security, and "need to know" situations.

Requirements

Required H.S. Diploma or GED
10 years' experience in information security, computer management, identity access management, or IS networking, including at least 5 years of information security experience
An ASD (Associates) in INFO SECURITY may substitute for up to 2 years of General IS and Info Security experience.
A BSD (Bachelors) in INFO SECURITY may substitute for up to 4 years of General IS and Info Security experience.
An ASD in GENERAL INFORMATION SERVICES may substitute for up to 2 years of General IS experience, but may not substitute for any Info Security experience.
A BSD in GENERAL INFORMATION SERVICES may substitute for up to 4 years of General IS experience, but may not substitute for any Info Security experience.
An ASD in any other field of study outside of information services may substitute for up to 1 year of General IS experience, but may not substitute for any Info Security experience.
A BSD in any other field of study outside of information services may substitute for up to 2 years of General IS experience, but may not substitute for any Info Security experience.

Nice To Haves

CISSP - Cert.Info.Sys Security Profes. ISC2
SANS - SysAdmin, Audit, Network, Sec. SANS
HCISPP – Cert.Info.Sec.Priv.Profes. ISC2
Security+ CompTIA
CCSP Cert.Cloud.Sec.Profes. ISC2
SSCP Sys.Sec.Cert.Profes. ISC2

Responsibilities

Develop Security Policy and Provide Compliance Reporting.
Develop, review, update, and communicate IDS policies related to information security.
Develop security specification and certification methodology for all IDS systems to assure that systems are implemented according to security policy.
Develop a monitoring and compliance strategy to ensure security policies are followed.
Conduct periodic inspections of IDS computer systems to ensure compliance with security policies and procedures.
Lead remediation of non-compliant systems; investigate policy violations and resolve issues to bring into compliance.
Develop and promote risk assessment methodology for IDS network computer systems.
Develop and promote incident response plan and coordinate team for response to computer viruses, system intrusions, and policy violations.
Publish a monthly security briefing for the Chief Information Security Officer.
Develop Information Security Strategy. Coordinate Security implementations across IS Disciplines and user departments.
Architect, Implement, and Document Security Infrastructure. Established DRBCP architecture and solutions.
Advocate for security awareness and training. Manage complex customer interactions, regulatory changes, and innovations appropriately.