Cybersecurity Solutions Architect

Responsibilities

• Lead the solutions architecture function to ensure security is integrated early in the development lifecycle for in-house applications or SaaS based solutions, infrastructure projects and technology processes.
• Partner with business and technology teams to identify and document workflows, system architecture, data flows and develop appropriate security considerations.
• Leverage Threat Modeling techniques to identify security threats, vulnerabilities, and attack vectors across the solution (infrastructure, application, data).
• Ensure the security considerations identified are implemented and the solutions are configured securely.
• Develop secure patterns for foundational technology solutions based on CAA security standards and continually educate technology stakeholders on the adoption of patterns.
• Key focus on security integrations includes secure access and authorizations, audit logging, secrets management, data protection, data security and other functional third-party integrations.
• Support the SaaS/Third Party security assessments and collaborate with service owners, business leads and vendors to develop a managed solution aligned with CAA security policies.
• Identify risks and provide mitigating controls or risk treatment options for a given solution.
• Develop training for technology team members to increase awareness on security practices for onboarding new technology solutions.

Requirements

• Minimum 8 years of Information Security experience with a Bachelor’s Degree.
• Minimum 3 years experience in a Security Architecture function.
• Create and review system architecture diagrams in Lucidchart or equivalent tool.
• Experience in SaaS and Cloud architectures – Azure, AWS, M365, and exposure to SAP 4/HANA, Workday, Salesforce, and other SaaS solutions.
• Cloud architecture certifications preferred.
• Experience with Cybersecurity frameworks – NIST CSF, CSA Cloud Controls.
• Cybersecurity certifications CISM, CISSP or equivalent work background preferred.
• Familiarity with operational tools such as JIRA, ServiceNow, OneTrust.
• Experience with contractual and regulatory standards such as GDPR, CCPA, FINRA, TISAX, SOX.
• Experience with third party security assessments and standards – SOC, ISO27001, SIG.
• Able to communicate complex messages in a clear and concise manner with stakeholders at all levels.
• Excellent organizational skills and ability to communicate with internal/external entities and executives.
• Effective leadership skills with demonstrated ability to coordinate people and teams to project/activity completion.
• Ability to work in team environment sharing responsibilities.
• Ability to work in a flexible environment where requirements and procedures continuously evolve.
• Creative Artists Agency, LLC (the “Company”) is committed to a policy of Equal Employment Opportunity and will not discriminate on the basis of race (inclusive of traits historically associated with race, including hair texture and protective hairstyles), color, religion, creed, gender or sex (including pregnancy, childbirth, breastfeeding or related medical conditions), national origin, ancestry, age, physical disability, mental disability, medical condition, genetic information, family and medical care leave status, military or veteran status, marital status, family status, sexual orientation, gender identity, gender expression, political affiliation, an employee’s or their dependent’s reproductive health decision making (e.g., the decision to use or access a particular drug, device or medical service), or any other characteristic protected by applicable law.

Qualifications

• Minimum 8 years of Information Security experience with a Bachelor’s Degree.
• Minimum 3 years experience in a Security Architecture function.
• Create and review system architecture diagrams in Lucidchart or equivalent tool.
• Experience in SaaS and Cloud architectures – Azure, AWS, M365, and exposure to SAP 4/HANA, Workday, Salesforce, and other SaaS solutions.
• Cloud architecture certifications preferred.
• Experience with Cybersecurity frameworks – NIST CSF, CSA Cloud Controls.
• Cybersecurity certifications CISM, CISSP or equivalent work background preferred.
• Familiarity with operational tools such as JIRA, ServiceNow, OneTrust.
• Experience with contractual and regulatory standards such as GDPR, CCPA, FINRA, TISAX, SOX.
• Experience with third party security assessments and standards – SOC, ISO27001, SIG.
• Able to communicate complex messages in a clear and concise manner with stakeholders at all levels.
• Excellent organizational skills and ability to communicate with internal/external entities and executives.
• Effective leadership skills with demonstrated ability to coordinate people and teams to project/activity completion.
• Ability to work in team environment sharing responsibilities.
• Ability to work in a flexible environment where requirements and procedures continuously evolve.

Skills

• Strong understanding of cybersecurity principles and practices.
• Experience with threat modeling and security assessment methodologies.
• Knowledge of cloud computing platforms and security best practices.
• Proficiency in cybersecurity frameworks and standards.
• Experience with security architecture and design.
• Ability to communicate effectively with technical and non-technical stakeholders.
• Experience with regulatory compliance and risk management.

Benefits

• Competitive compensation package.
• Flexible work schedule.
• Professional development opportunities.
• Health and wellness programs.
• Employee recognition and rewards program.

Pay

• Salary range: $120,000 - $150,000 annually.

Schedule

• Full-time position.