Information Security Architect

FLSA Status: Exempt

About the Role

The Information Security Architect is responsible for designing, building, testing, and implementing systems within the Houston Methodist IT network. This role prepares security standards, recommends updates to security policies and procedures, and serves as a mentor to junior team members. The architect develops and maintains the high-level plan for the overall logical and technical architecture of the enterprise security postures, provides technical leadership and consulting across the organization, and gains organizational commitment for information security plans.

Qualifications

• Bachelor’s degree required, preferably in cyber security, computer science, information systems, or computer engineering.
• Seven years of experience in Information Technology, including five years in information security.

Preferred Certifications

• CISSP - Certified Information Systems Security Professional (IISSCC)
• Certified Ethical Hacker (CEH)

Skills and Abilities

• Demonstrates skills and competencies necessary to safely perform the assigned job.
• Proficient in speaking, reading, and writing English to perform essential job functions, especially regarding patient or employee safety.
• Ability to communicate effectively with all levels of the organization and translate technical language for non-technical audiences.
• Expert understanding of network security, hardware configuration, network protocols, and standards.
• Strong business acumen and ability to partner across the organization to drive security strategies that support business goals.
• Strong understanding of mobile device security management, including configuration and administration of mobile manager applications.

Responsibilities

People

• Gains organizational commitment for IT security plans.
• Communicates effectively (oral and written) to cultivate a culture of security awareness and support ongoing education.
• Serves as a mentor to junior team members and assists with training through formal and informal methods.

Service

• Reviews current system security measures and recommends enhancements.
• Implements security systems by specifying intrusion detection methodologies and equipment.
• Oversees security equipment and software installations and configurations.
• Partners with Security Analysts to ensure prompt response to security incidents and provides post-event analyses.
• Evaluates network and security technologies.
• Develops requirements for LANs, WANs, VPNs, routers, firewalls, and related security and network devices.

Quality/Safety

• Conducts regular system tests and ensures continuous monitoring of network security.
• Makes recommendations regarding system access based on need and role.
• Establishes security procedures and conducts cyber incident response drills.

Finance

• Prepares system security reports by collecting, analyzing, and summarizing data and trends to ensure timely and cost-effective project timelines.
• Evaluates new security tools and negotiates purchase agreements.

Growth/Innovation

• Proactively stays up to date on the latest security standards, authentication protocols, and best practice security products.
• Shares information and trains team members.
• Maintains in-depth knowledge of organizational strategic priorities.
• Proactively manages professional development and completes an Individual Development Plan (IDP).

Schedule

• On-call during emergencies (e.g., disaster, severe weather events).
• May require travel within and outside the Houston Metropolitan area.