Cybersecurity Architect

Live here. Play here. Bank here. Work here.

If you're looking to build your career at a forward-thinking organization with deep community roots and a vision for growth, success, and giving back, you've come to the right place.

Get to know us:

* We're your local community bank-and have been since 1875-that is committed to providing excellent customer service and giving back to our communities.

* We foster a collaborative, inclusive work environment as part of a close-knit team where your voice is valued and heard.

* Our highly engaged employees are rewarded for their performance and have ample opportunities for cross-training and advancement within the organization.

* We've been named one of the best places to work in Maine, and offer robust benefits focused on your holistic well-being.

______________________________________________________________________________________________________________

Position Summary:

The Cybersecurity Architect will be responsible for providing secure solutions and services which provide defense in depth for Camden's enterprise computing systems. The Cybersecurity Architect will develop long-term cyber security strategies and roadmaps, using security frameworks to strengthen the Bank's overall information security posture. In addition, this role will be a key contributor in the development of the bank's security architecture and partner with our business and technology partners.

Essential Duties and Responsibilities:

* Align enterprise security architecture with applicable regulatory and industry frameworks including NIST CSF, SOX, and GLBA requirements

* Participate in security reviews of vendor technologies, SaaS solutions, and integrations

* Analyze and recommend security controls and procedures in the acquisition, development, and change management lifecycle of information systems

* Use industry standard security architecture frameworks to ensure security controls are well integrated and meet the quality attributes of confidentiality, integrity, and availability

* Provide technical security leadership to evolve the organization's Zero Trust security architecture strategy across cloud, identity, endpoint, and network domains

* Support and develop security standards and governance controls for enterprise AI platforms, generative AI integrations, and machine learning-enabled business solutions.

* Partner directly with technology and business stakeholders on the identification, development and review of enterprise security standards

* Coach and mentor teams to incorporate security into enterprise and customer-facing applications

* Contribute to and advance the organization's security strategy and product roadmap

* Identify and communicate current and emerging threats to the organization

* Protect the company's information assets using a variety of technological and security controls

* Respond to all system and network security breaches

* Assist in complex security control analysis and enterprise security design problem solving

* Conduct architecture risk assessments and threat modeling using frameworks such as STRIDE, MITRE ATT&CK, or attack path analysis

Basic Qualifications:

* Bachelor's degree in Computer Science, Information Systems, or Cybersecurity

* 7 or more years of related work experience

* Experience with development, implementation, operation, and testing of Information Technology within regulated environments

* Experience with firewalls, SIEM/SOAR, e-mail security, incident response, vulnerability management, and Data Loss Prevention

* Basic proficiency in scripting languages such as Python and Powershell

Preferred Qualifications:

* CISSP, CCSP, or GDSA

* Risk management experience

* Experience with SASE/SSE and ZNTA architecture

* Understanding of securing AI tools, AI integrations, and AI oversight

* Background in securing and developing API Integrations

* Prior experience working in a regulated environment

* Broad infrastructure and enterprise technology experience preferred

Skills and Abilities:

* Ability to manage multiple tasks and work in a fast-paced environment

* Ability to communicate complex security concepts to technical and non-technical stakeholders, including leadership and business partners

* Technical writing

* Project Management

* Team player

The statements contained herein reflect general details as necessary to describe the principle functions for this job, the level of knowledge and skill typically required, and the scope of responsibility, but should not be considered an all-inclusive listing of work requirements. Individuals may perform other duties as assigned, including work in other functional areas to cover absences or to equalize peak work periods to balance workloads.

________________________________________________________

Our comprehensive total rewards package offers something for everyone!

* Robust medical, dental, and vision insurance packages

* Generous time off, including paid federal holidays and paid day off for your birthday

* 401(k) retirement savings plan

* Tuition…