Architect III - Security Architect

Job Title: Architect III - Security Architect Location: Block 23 What you'll do: As a Security Architect, you'll be a key member of the Enterprise Architecture team, responsible for advancing the organization's business and technology strategy within the cybersecurity domain. You will participate in governance forums such as the Architecture Standards Board (ASB) and Technology Review Board (TRB), manage the business capability inventory for your domain, and develop applicable standards and patterns for ASB review and approval. In this role, you'll also be accountable for the design and documentation of solution architectures related to applications and capabilities within your domain. You will work closely with business, product, and IT teams to ensure designs are secure, compliant, and reliable, while meeting business needs. Additionally, you will review solution architecture designs in TRB to ensure alignment with approved standards and patterns. - Own security solution architecture for assigned products and platforms within the Security domain. - Develop and maintain security standards, reference architectures, and design patterns for use in governance and solution delivery. - Translate business and technical requirements into security architecture blueprints and document all design and analysis work. - Track emerging threats, vulnerabilities, and technology trends to ensure security strategies remain current and effective. - Provide architecture guidance during solution design reviews, ensuring alignment with enterprise security posture and regulatory requirements. - Act as a security SME within EA domains, influencing architecture decisions and ensuring secure design principles and best practices are integrated early in the solution lifecycle. - Evaluate emerging security tools and services, advising on adoption strategies and integration feasibility. What you'll need: 10+ years of related experience. Bachelor's degree in related field required. Strong understanding of security domains (IAM, Network, Application, Cloud, Data, AI) with depth in at least two. Hands-on experience creating architecture artifacts (standards, patterns, diagrams) and supporting governance processes. Ability to evaluate technology landscapes and emerging threats and distill them into repeatable, secure design patterns. Hands-on experience designing secure cloud architecture, with a strong emphasis on Microsoft Azure; AWS experience is also acceptable. Experience with threat modeling methodologies and ability to operationalize them within governance processes. Knowledge of CASB solutions, data governance and security practices, and Zero Trust principles for securing cloud, applications, and data. Excellent communication skills, able to engage both technical teams and business stakeholders. Knowledge of financial services regulatory requirements (e.g., FFIEC, PCI DSS, SOX). Familiarity with DevSecOps practices and CI/CD security integration. Security Architect Level Certifications (e.g., CISSP, CCSP, Microsoft Cybersecurity Architect Expert) Previous leadership experience preferred. Intermediate knowledge of general Financial Services or Banking is preferred. Intermediate knowledge of applicable regulatory and legal compliance obligations, rules and regulations, industry standards and practices. Advanced experience working in an architecture function with knowledge & experience developing reference architectures & patterns and supporting governance functions related to: Application Development, Cloud Compute, Storage and Networking technologies. IaaS, PaaS, SaaS, Serverless, Containers, Automation, Security. Advanced u