Senior Security Architect

First Hawaiian Bank•Honolulu, HI

About The Position

First Hawaiian Bank is seeking a Senior Security Architect for its Security Architecture & Operations Department. This role advances the Bank’s enterprise security architecture strategy and ensures the secure design, integration, and operation of technology solutions across hybrid environments, including on-premises infrastructure, cloud platforms (IaaS, SaaS, and PaaS), and AI/ML and generative AI technologies. The Senior Security Architect provides strategic security guidance, architectural oversight, and risk-based recommendations to enable secure business innovation and regulatory compliance. The role works with business leaders, technology teams, enterprise architects, and project stakeholders, and supports the development and execution of cloud security, AI security, and emerging technology security programs. The role’s schedule is Monday through Friday, 8:00 AM to 5:00 PM; hours may vary. Flexibility to support critical incidents, technology implementations, and business needs outside normal business hours may be required. The stated annual pay range is $113,500–$150,000, commensurate with experience. The posting describes minimum experience qualifications at both Officer and AVP levels.

Requirements

Officer-level minimum: two years of experience with cloud infrastructure; AWS is preferred, and GCP, Azure, and/or OCI are acceptable.
AVP-level minimum: four years of experience with cloud infrastructure; AWS is preferred, and GCP, Azure, and/or OCI are acceptable.
Five years of experience in IT infrastructure architecture, including areas such as cloud, routing, switching, WAN/LAN, virtualization, systems engineering, or scripting.
Officer-level minimum: five years of experience in security engineering and security architecting.
AVP-level minimum: ten years of experience in security engineering and security architecting.
Demonstrated experience engineering and architecting complex IT infrastructure solutions.
Demonstrated experience managing and operationally implementing cybersecurity frameworks and concepts.
Demonstrated experience in security or architecture for AI/ML and generative AI systems, such as model pipelines, LLM integrations, MCP, or third-party model usage.
A bachelor’s degree in information security, computer science, information systems, cybersecurity, engineering, or a related discipline, or a combination of education and experience.
Excellent verbal, written, presentation, and interpersonal communication skills, including the ability to explain complex technical concepts to executive, business, and technical audiences.
Strong strategic thinking, analytical, and problem-solving skills, including the ability to assess complex risks and develop practical, risk-based solutions.
Ability to influence decisions and build consensus across business, technology, security, risk, compliance, and executive leadership teams.
Demonstrated project planning, organizational, and prioritization skills, with the ability to manage multiple initiatives and meet deadlines with minimal supervision.
Ability to develop and present architectural recommendations, risk assessments, and security strategies to governance committees and senior leadership.
Sound judgment and discretion when handling confidential, sensitive, and proprietary information.
Ability to work effectively independently and collaboratively in a team-oriented environment.
Strong knowledge of security governance, risk management, compliance requirements, and security-by-design principles.
Ability to mentor, coach, and provide technical leadership to security professionals and project teams.
Flexibility to support critical incidents, technology implementations, and business needs outside normal business hours when required.

Nice To Haves

Cloud security certifications for AWS, GCP, or Azure.
SSCP, Security+, GSEC, Microsoft Certified Systems Engineer (MCSE), CISSP, Cisco Certified Network Professional (CCNP), Cisco Certified Security Professional (CCSP), or other related cybersecurity or AI/ML security certifications.

Responsibilities

Lead and materially contribute to designing and implementing secure enterprise architectures for hybrid on-premises, cloud, and AI/ML technology initiatives.
Collaborate with business and technology stakeholders on security architectures, network and system designs, process flows, resource planning, budgets, and implementation roadmaps.
Ensure solutions adhere to security standards, architecture principles, and regulatory requirements; identify opportunities to enhance security controls and frameworks.
Evaluate current and emerging technology architectures to identify security risks, control gaps, and opportunities for improvement, and recommend strategic enhancements to security posture and operational resilience.
Contribute to the information security technology roadmap, including cloud security, identity and access management, data protection, infrastructure security, and AI security capabilities.
Conduct security architecture reviews of proposed technology initiatives and infrastructure changes through established governance and change management processes.
Assess security implications of planned changes, provide risk-based recommendations, and ensure alignment with enterprise architecture standards, security policies, and industry best practices.
Maintain understanding of applicable regulatory, legal, and industry security requirements, incorporate required controls into reviews and assessments, and partner with risk, compliance, audit, and technology teams on compliance initiatives.
Partner with enterprise architecture, infrastructure, application development, and business leadership teams to align information security strategy with broader technology objectives.
Participate in strategic technology planning and governance forums, advising on security implications, emerging threats, technology trends, and risks associated with AI/ML and generative AI adoption.
Serve as a security architecture subject matter expert and trusted advisor, providing guidance on security design principles, risk management practices, and security requirements.
Promote security-by-design and support secure adoption of cloud-based and AI-enabled technologies.
Define, implement, and maintain security architecture standards and control frameworks for AI/ML and generative AI technologies.
Oversee the secure design and operation of machine learning platforms, model development, LLM integrations, and third-party AI services across the Bank’s hybrid technology environment.
Identify and assess AI-specific threats, vulnerabilities, and risks, and establish security controls, governance standards, and monitoring practices for responsible AI adoption.