Description

Information Security (InfoSec) Architect

Location: Remote
Working Hours: 8 AM -5 PM EST
Employment Type: Contract (potential temp-to-hire)
Top 3 Must-Haves

• Strong communication skills
• Cybersecurity controls expertise
• Security architecture & design background
• Experience with PCI compliance, audits, and IT engineering

Top 3 Nice-to-Haves

• CISSP, CRISC, or AI-related certifications
• Degree in a relevant field (experience may be accepted in lieu of degree)

Certification Requirements

• Security-related certification (CISSP, CRISC, etc. Preferred)

Experience Required

• 7-10 years of professional experience

Role Overview
The InfoSec Architect will partner with IT teams to ensure that security controls are embedded in technology solutions and that IT products meet compliance and security standards. This role requires both technical expertise and the ability to communicate complex concepts clearly.
Day in the Life

• Collaborate with IT partners on current and new solutions
• Review how security controls are embedded and propose improvements
• Work with team members on process improvements for consistent delivery of security consulting

Interaction

• Frequent (weekly, potentially daily) interaction with team members and stakeholders

First 90 Days Priorities

• Learn internal systems, tools, and standards
• Shadow team members to understand current processes
• Transition into leading security consulting engagements with IT teams

Key Challenge

• Navigating and understanding the complexity of the BFH environment and building the right cross-business relationships to obtain necessary information

Essential Job FunctionsSecurity Architecture Development & Maintenance

• Assist Sr. And Principal Architects in creating security designs and frameworks
• Monitor security intelligence sources for emerging issues, regulations, and technologies
• Provide oversight of new development efforts for compliance with security policies and standards
• Participate in decisions on adoption of new hardware/software technologies
• Provide advisory services and utilize planning tools for project execution

Information Security Strategy

• Contribute to the development and documentation of the annual Information Security Strategy
• Assist with formalized roadmaps and ongoing strategy maintenance

Cybersecurity Tooling & Processes

• Apply knowledge of Cybersecurity tools and processes to identify and mitigate risks
• Promote adoption of security tools through education and awareness

Regulatory Compliance & Control Frameworks

• Working knowledge of PCI-DSS, SOX, GLBA, CCPA, GDPR
• Familiarity with control frameworks: NIST 800-53, ISO 27001, FFIEC Handbooks
• Advanced knowledge of maturity frameworks such as NIST-CSF and FFIEC Cyber Assessment Tool

General IT Knowledge

• Networking, LDAP, patch management, incident/change management, desktop/server management, mainframe technologies, encryption/key management
• Cloud architecture and computing
• Secure SDLC, access management, business continuity/disaster recovery

Minimum Qualifications

• High school diploma (or equivalent experience)
• 5-8 years in a similar role (education may substitute experience)
• 3+ years with AWS and Microsoft Azure
• Multi-cloud and/or hybrid cloud architecture experience
• Ability to create and communicate strategic cybersecurity direction
• Proven knowledge of distributed system architecture and secure cloud migration

Preferred Qualifications

• Bachelor's degree in Engineering, Computer Science, or Information Security
• Familiarity with scripting languages (JavaScript, Python, PowerShell)
• Prior experience in SRE, DevSecOps, or DevOps
• Knowledge of CI/CD and security configuration management
• Strong documentation and standards writing skills
• Understanding of application-layer vulnerabilities in cloud environments
• Hands-on experience with:
  
  • Cloud-native security tools (Azure Security Center, AWS Guard Duty)
  • Cloud Security Posture Management (CSPM) tools
  • VMs, containers, and orchestration (Docker, Kubernetes)

Certifications (Preferred)

• CISSP
• AWS Certified Solutions Architect
• Azure Security Certification
• Equivalent security-related certifications