Cyber Security Architect

Thank you for your interest in a career  Regions, we believe associates deserve more than just a job. We believe in offering performance‑driven individuals a place where they can build a career --- a place to expect more opportunities. If you are focused on results, dedicated to quality, strength and integrity, and possess the drive to succeed, then we are your employer of choice.

Regions is dedicated to taking appropriate steps to safeguard and protect private and personally identifiable information you submit. The information that you submit will be collected and reviewed by associates, consultants, and vendors of Regions in order to evaluate your qualifications and experience for job opportunities and will not be used for marketing purposes, sold, or shared outside of Regions unless required by law.

Such information will be stored in accordance with regulatory requirements and in conjunction with Regions’ Retention Schedule for a minimum of three years. You may review, modify, or update your information by visiting and logging into the careers section of the system.

At Regions, the Cyber Security Architect contributes to the advancement of Regions’ cyber security program and its capabilities through developing, communicating, and implementing a security architecture. This position establishes secure development practices which increases the security of internal systems. Additionally, this position collaborates closely with key stakeholders and teams as part of business projects and/or initiatives.

• Contributes to the development and establishment of a strategic cyber security architecture and strategic vision, including standards and frameworks that are aligned with the overall business and Regions’ information technology strategy
• Works closely with Enterprise Architecture and Application Development groups to enhance the security posture of new and existing systems
• Contributes to the design of cyber security architecture, evaluates and mitigates potential risk, and, when necessary, approves implementation of systems and applications into production
• Performs assessments using the National Institute of Standards and Technology (NIST) Cyber Security Framework and the Federal Financial Institutions Examination Council (FFIEC) Cyber Assessment Tool to identify gaps and remediate deficiencies
• Ensures systems and applications are implemented with compensating controls to meet regulatory requirements (e.g. GLBA, SOX, HIPAA, FFIEC, etc.) as well as other organizational compliance (PCI) requirements
• Tracks metrics for compliance to internal cyber security standards set by application and system owners
• Offers advice and guidance to junior architects, assisting in the development of necessary skills and technical knowledge

This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay.

• Bachelor’s degree in Computer Science, or related field
• Five (5) years of experience in cyber security, with a focus on software development, secure software development lifecycle (SDLC), or security architecture

• Experience in the design and implementation of cyber security solutions

• Ability to effectively evaluate risk vs. reward
• Ability to independently problem solve with sound judgement
• Ability to translate complex technical information across all levels of the organization through communications and/or presentations
• Ability to work in a team environment when applicable
• Advanced knowledge of risks associated with virtualization and cloud-based computing and the impact of those technologies on an organization’s security posture
• Advanced knowledge of security principles, solutions, tools, methodologies, and techniques
• Proficiency in Microsoft Office (Excel, Word, PowerPoint, Outlook, etc.)
• Strong project management skills
• Strong verbal, written communication, and organizational skills
• Strong work ethic and self‑motivation

Full time

Pay ranges are job specific and are provided as a point‑of‑market reference for compensation decisions. Other factors which…