Security Architect

Prequel is seeking an Security Architect role.

Primary Success Factors

• Drive design, strategy and execution across multiple technology security architectures including application, cloud, information security and infrastructure
• Lead and enable core security practices within the Banks Cloud based container based architecture including Docker, Microservices and AWS.
• Lead information security reviews of technology environments and business unit services
• Lead security implementation plans with cross-functional teams
• Drive implementation of security standards and practices to support a strong security posture
• Lead design of information security orchestration to automate key processes
• Lead information security integration in the Banks DevSecOps continuous integration / deployment code pipeline processes
• Support execution of the Banks security incident response processes
• Lead security elements of the Banks software development lifecycle process specifically static code analysis, open source composition analysis and dynamic code analysis
• Identify process and operational improvements to extract further value from existing information security investments in order to meet dynamic compliance, regulatory and security requirements
• Serve on the Banks Enterprise Architecture Group to advise on information and cyber security principles
• Understand emerging information security solutions and apply to advance the Banks security program

Required Experience

• A minimum of seven years of broad level experience in architecting technology and information security eco-systems across a variety of technical and business disciplines
• Bachelors degree in Information Systems or related field or an equivalent combination of education and work experience
• Industry certification or eligibility preferred (e.g. CISSP, CCSP, ISSAP, AWS security certifications)
• Strong working knowledge of cybersecurity architecture and engineering, technology control frameworks and standards, and information security best practices
• Deep knowledge of cloud and container based technology architectures including Kubernetes, AWS, Microservices and Docker.
• Deep understanding of Identity & Access Management architecture and process concepts
• Strong understanding of continuous development/continuous integration processes and toolsets (ie: Jenkins, Nexus), IaC and development tools
• Knowledge of control activities in the areas of change management, computer operations, database administration, information security administration, network security, operating system security and application security
• Knowledge of current tools/practices for developing and publishing policies, procedures, metrics and other information
• Knowledge of security design in cloud architectures including Amazon Web Services and Microsoft Azure
• Knowledge of Bank business applications is a plus