Cybersecurity Architect

## Cybersecurity Architect Apply remote type:
Hybrid (Remote/Office) locations:
ME, Gardiner, 190 Water St:
ME, Portland, 2 Canal Plaza 220 Middle Street:
ME, Camden, 2 Elm St:
ME, Auburn, 178 Court St:
NH, Berlin, 9 Main Sttime type:
Full time posted on:
Posted 2 Days Agojob requisition :
R2467# Live here. Play here. Bank here.
* Work here.*## If you’re looking to build your career at a forward-thinking organization with deep community roots and a vision for growth, success, and giving back, you’ve come to the right place.#
** Get to know us:
*** We’re your local community bank—and have been since 1875—that is committed to providing
** excellent customer service
** and
** giving back
** to our communities.
* We foster a
** collaborative, inclusive
** work environment as part of a close-knit team where your
** voice is valued
** and heard.
* Our
** highly engaged employees
** are rewarded for their performance and have ample opportunities for cross-training and
** advancement within the organization**.
* We’ve been named one of the
** best places to work in Maine**, and offer
** robust benefits
** focused on your holistic well-being.*
* ***
* Position Summary:

** The Cybersecurity Architect will be responsible for providing secure solutions and services which provide defense in depth for Camden’s enterprise computing systems. The Cybersecurity Architect will develop long-term cyber security strategies and roadmaps, using security frameworks to strengthen the Bank’s overall information security posture. In addition, this role will be a key contributor in the development of the bank’s security architecture and partner with our business and technology partners.
*
* Essential Duties and Responsibilities:

*** Align enterprise security architecture with applicable regulatory and industry frameworks including NIST CSF, SOX, and GLBA requirements
* Participate in security reviews of vendor technologies, SaaS solutions, and integrations
* Analyze and recommend security controls and procedures in the acquisition, development, and change management lifecycle of information systems
* Use industry standard security architecture frameworks to ensure security controls are well integrated and meet the quality attributes of confidentiality, integrity, and availability
* Provide technical security leadership to evolve the organization’s Zero Trust security architecture strategy across cloud, identity, endpoint, and network domains
* Support and develop security standards and governance controls for enterprise AI platforms, generative AI integrations, and machine learning-enabled business solutions.
* Partner directly with technology and business stakeholders on the identification, development and review of enterprise security standards
* Coach and mentor teams to incorporate security into enterprise and customer-facing applications
* Contribute to and advance the organization’s security strategy and product roadmap
* Identify and communicate current and emerging threats to the organization
* Protect the company’s information assets using a variety of technological and security controls
* Respond to all system and network security breaches
* Assist in complex security control analysis and enterprise security design problem solving
* Conduct architecture risk assessments and threat modeling using frameworks such as STRIDE, MITRE ATT&CK, or attack path analysis
** Basic Qualifications***:
** Bachelor’s degree in Computer Science, Information Systems, or Cybersecurity
* 7 or more years of related work experience
* Experience with development, implementation, operation, and testing of Information Technology within regulated environments
* Experience with firewalls, SIEM/SOAR, e-mail security, incident response, vulnerability management, and Data Loss Prevention
* Basic proficiency in scripting languages such as Python and Powershell
*
* Preferred Qualifications:

*** CISSP, CCSP, or GDSA
* Risk management experience
* Experience with SASE/SSE and ZNTA architecture
* Understanding of securing AI tools, AI integrations, and AI oversight
* Background in securing and developing API Integrations
* Prior experience working in a regulated environment
* Broad infrastructure…