Information Security Architect
AmTrust Financial · Cleveland, OH, US
About this role
## Information Security Architect ### Overview Design, assess, and advance security architecture across identity and access management, infrastructure, cloud, applications, data, network, endpoint, third-party, and operational technology domains. Partner with infrastructure, engineering, application development, and security leaders to influence and secure enterprise technology decisions. ### Key Responsibilities - Lead the development of the enterprise cybersecurity architecture vision and technology strategy (roadmaps, target-state architectures, guiding principles) - Establish, review, and govern cybersecurity architecture across multiple domains to align investments, dependencies, and enterprise priorities - Serve as principal security architecture advisor for complex, high-risk, cross-functional initiatives; lead architecture governance and ensure adherence to standards, policies, roadmaps, and control requirements - Develop and maintain enterprise security reference architectures, design patterns, control frameworks, and architecture standards - Partner with AI governance stakeholders to design cybersecurity processes and controls for secure AI-enabled solutions - Provide security architecture guidance for emerging technologies (including Generative AI), focusing on data protection, access governance, model risk management, responsible AI, and secure lifecycle controls - Monitor threat intelligence, attack techniques, regulatory developments, and technology trends to identify strategic risks and future investment needs - Ensure vendor selections align with enterprise architecture principles, cybersecurity strategy, risk appetite, and long-term business objectives - Champion security-by-design principles (Zero Trust, least privilege, defense-in-depth, segmentation, secure configuration, data protection, cyber resilience) - Collaborate with security operations, risk management, infrastructure, engineering, application development, data, privacy, and compliance to support detection, incident response, disaster recovery, vulnerability management, and regulatory obligations - Establish cybersecurity architecture quality standards for secure engineering, operational readiness, observability, resilience, and integrated response - Build organizational capability through mentorship, knowledge sharing, and leadership - Comply with company policies, standards, and regulatory requirements (e.g., SOX IT General Controls, PCI DSS, GDPR, CCPA) ### Qualifications - Bachelor’s degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, or related field (or equivalent education + relevant experience) - 5+ years progressive information security experience, including designing, implementing, and governing enterprise security capabilities - Broad architecture experience across cybersecurity, infrastructure, cloud, applications, data, identity, and enterprise technology domains - Experience leading enterprise-wide cybersecurity architecture strategy, governance programs, architecture roadmaps, or large-scale security transformations - Ability to translate business objectives, regulatory requirements, and cyber risk into scalable security architectures and standards - Strong knowledge of modern security architecture principles and frameworks (Zero Trust, defense-in-depth, secure-by-design, cloud security, IAM, data protection, cyber resilience) - Excellent communication, stakeholder management, and leadership skills - Pre
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.