Cybersecurity Architect

About the role

Stefanini is looking for a Cybersecurity Architect to join its Cyber Security Services division. The role works with the Vice President of Information Security to build a security program and prioritise projects aligned with the company's strategic roadmap. It serves as the technical leader and escalation point for security incidents and requests, interfaces with Application and Infrastructure teams and business unit leaders, and works US business hours, Monday to Friday, 9:00 AM to 5:00 PM US Central Time.

Key responsibilities

• Design and implement security architectures, standards, guidelines and best practices, and remediate security risks in enterprise projects
• Act as a key member of the Architecture Review Board, reviewing major technology initiatives for security, architecture, integration, risk and long-term supportability
• Configure and deploy tools such as privileged identity management, secure cloud posture management, secure application development technologies, AI controls, cloud security governance, firewalls, IDS/IPS, SIEM, endpoint protection and encryption
• Produce management reporting on information security risk and exposure, and advise technology teams on security matters
• Ensure compliance with local regulations, encryption rules, privacy laws and standards such as PCI, SOX, FTC and GDPR

Required profile

• Bachelor's degree in a related technical or business area, or 10+ years of equivalent experience
• 3+ years as a security architect or consultant with enterprise experience
• Excellent communication skills, able to explain security and risk to technical and non-technical audiences
• Ability to manage multiple projects under tight deadlines in a demanding environment
• Preferred: CISSP, CISM, CISA, AWS or Azure security certifications, and knowledge of ISO/IEC 27001, ITIL, COBIT, NIST and CIS frameworks

Required skills

• Security architecture, including AI controls and Zero Trust
• Firewalls, IDS/IPS, SIEM, endpoint protection, IAM, WAF and SDLC
• Windows, Linux and Unix hardening
• Cryptographic principles (SSL/TLS, PKI)
• Compliance with PCI DSS, GDPR, HIPAA and data governance tools such as DLP and FIM

What we offer

• Soft skills and technical training on current and emerging products
• Mentoring programmes and career development opportunities
• Employee assistance programmes and a friendly team
• Referral bonuses