Director Cybersecurity Architecture

and how to change your settings.

Director Cybersecurity Architecture page is loaded## Director Cybersecurity Architecture locations:
CT Southington:
NY LI Jericho time type:
Full time posted on:
Posted 30+ Days Agojob requisition :
R25 If you’re looking for a meaningful career, you’ll find it here nded in 1935, our focus has always been to put people first--doing whatever we can to help individuals, families, businesses and our colleagues achieve their financial goals. As a leading commercial bank, we remain passionate about serving our clients and supporting our communities. Integrity, Collaboration, Accountability, Agility, Respect, Excellence are Webster’s values, these set us apart as a bank and as an employer.

Come join our team where you can expand your career potential, benefit from our robust development opportunities, and enjoy meaningful work!

The Cyber Security Architect will directly support the Managing Director of Security Architecture and is responsible for providing the highest quality Cyber and Information Technology security solutions to Webster Bank associates and customers. The primary functions for this position include formulating, designing, and reviewing bank security systems and solutions as well as ensuring that all bank technology initiatives and projects are implemented in a secure manner.

MAJOR DUTIES & RESPONSIBILITIES
* Formulate security architecture recommendations and design security services
* Ensure security and compliance of public Cloud IaaS, PaaS, and SaaS environments
* Ensure that existing network security systems within environment comply with company security policies, standards, and procedures
* Ensure that all bank technology initiatives and projects are implemented in a secure manner.
* Implement technical solutions for requirements supporting GLBA, SOX, FISMA, ISO, PCI, and HIPAA
* Recommend and coordinate the application of fixes, patches, and disaster recovery procedures in the event of a security breach
* Conduct risk assessments, diagnose internet/extranet security issues, intrusion attempts, cyber-crime response, assist in responses to external audits, penetration tests, and vulnerability assessments
* Research emerging technologies in support of security enhancement and development efforts
* Continuously identify gaps in security program coverage, employ secure configuration management processes
* Identify and prioritize critical business functions in collaboration with organizational stakeholders
* Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities -- knowledge may be gained through coursework and on-the-job training
* Follows all bank policies and procedures, compliance regulations, and completes all required annual required or job-specific training
* Actively learns, demonstrates, and fosters the Webster corporate culture in all actions and words
* Ensure secure implementation and usage of GenAI and LLM technologies within the organization, including data privacy and model integrity.
* Integrate security considerations into the development and deployment of generative AI (GenAI) systems and large language models (LLMs).EDUCATION, EXPERIENCE & SKILLS
* Bachelor's degree in a related field required (Advanced Degree a plus)
* 10+ years of professional IT experience
* 7+ years of professional Information/Cyber Security Experience
* Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography, and application security
* One Information/Cyber Security professional certification (CISSP, GIAC, CCNA Security or comparable)
* Secure coding practices, ethical hacking, and threat modeling
* Experience in public Cloud IaaS such as AWS and Azure
* API security best practices
* Knowledge of secure CI/CD pipeline or Dev Sec Ops
* Proficiency in Python, C++, Java, Ruby, Node, Go and/or Power Shell
* IDS/IPS, penetration and vulnerability testing
* Firewall and intrusion detection/prevention protocols
* Windows, UNIX, and Linux operating systems
* Virtualization technologies
* MySQL/MSSQL database platforms
* Identity and…