Senior Information Security Architect

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time 2 Professional Seal Beach, CA, US

4 days ago Requisition

Salary Range: $ To $ Annually

The Senior Information Security Architect is a highly motivated individual with a passion for protecting enterprise information systems. This position will work closely with the CISO and other senior management to understand evolving business and regulatory requirements for Bank systems, work closely with operational teams to understand the processes and technologies meeting those requirements, and assess whether those systems operate in a manner that not only meet security policies and standards but are well protected against the current threat landscape.

The Senior Information Security Architect will proactively work with stakeholders to remediate identified system vulnerabilities and act as a consultant to others, both technical and non-technical, needing advice on a broad range of information security topics.

While this role utilizes a high degree of professional oral and written communication skills to communicate with stakeholders and update written policies and standards guides, this individual is also expected to be hands‑on (technically) when needed to ensure security controls are working optimally and act as a last line of support when issues with security controls arise. The Sr. Information Security Architect assists the CISO with risk assessment activities via tabletop and penetration test exercises, selecting and implementing security controls, and documenting the results of their activities while executing the Information Security Program.

This role may require after‑hours support should serious security incidents and major production issues arise.

• Researches, designs, plans and advocates for the security architecture for IT systems.
• Develops, reviews, and determines installation security requirements for LANs, WANs, VPNs, firewalls, routers, and related network devices.
• Works with IT stakeholders to define baseline security configuration standards for operating systems, network segmentation, and cloud services.
• Determines security protocols by evaluating business strategies and requirements.
• Responds to and investigates security incidents and provides thorough post‑event analysis.
• Reviews system security measures, tracks deficiencies, works with stakeholders to remediate and develops the necessary controls to ensure deficiencies are not reintroduced into the system.
• Conduct regular testing and monitoring of network security.
• Serves as primary resource for security Software Development Life Cycle (SDLC) practices.
• Research and provide technical guidance to IT and Bank Security staff as needed, as well as acts in a mentoring role.
• Monitor and perform security operations tasks to ensure security controls work as expected.
• Track information security related corrective actions and approved exceptions.
• Create and maintain information security documentation, such as policies, procedures, standards.
• Cultivate and maintain good working relationships with stakeholders to ensure continued application of, and compliance to security guidelines.
• Updates job knowledge by tracking and understanding emerging security practices and standards, participating in educational opportunities.

When scheduled for on‑call duty, this position is responsible for all end‑user support after hours and ensuring that response times and service levels are within the guidelines established by management. Bank Security personnel must ensure that cell phones are on and available in the event of end‑user support call or outage alert via text message as well as quick access to workstation/laptop.

Bank Security personnel may be expected to be available to respond to critical situations, even if not scheduled for on‑call duty.

Complies with all State and Federal Banking regulatory requirements, including but not limited to: BSA, Anti‑Money Laundering OFAC, CIP, Financial Elder Abuse Reporting, Sexual…