Cybersecurity Solutions Architect

Job summary

The Cybersecurity Solutions Architect is responsible for identifying cyber security gaps, researching potential solutions and designing solutions to meet Majorel’s cyber security and business objectives while complying with security standards. This position leverages a risk-based approach to ensure appropriate security principles and controls are applied during the system development life cycle to meet stakeholder objectives and protect customer and corporate assets in line with enterprise risk appetite.

Main responsibilities

• Recommend appropriate security controls and solutions to protect confidentiality, integrity and availability of customer and corporate data in line with the enterprise risk appetite.
• Document and verify recommended cyber security policies and standards as well as industry best practices, ensure proper documentation of exceptions to standards and/or recommend mitigating controls.
• Work with business teams and Cybersecurity leadership to identify and recommend cyber security projects.
• Present technical information to technical and non-technical audiences to ensure business understanding of security controls and recommendations. Present recommendations to various levels within the organization.
• Communicate required systems and applications security solutions and tools to key stakeholders and ensures alignment with applicable laws, regulations, policies and standards, as well as industry best practices.
• Engage with Technology teams and management to identify security risks of proposed projects and recommend system and application modifications.
• Remain current with industry trends and security threats to advise management on how to mitigate and contain risks to the business. Prepare and deliver management level presentations to communicate trends and threats.
• Understand and adhere to the Company’s risk and regulatory standards, policies and controls in accordance with the Company’s Risk Appetite. Identify risk-related issues needing escalation to management.
• Proven knowledge of information technology security principles and implementation methods (e.g., Cloud, firewalls, demilitarized zones, encryption, Active Directory / LDAP, SAML)
• Experience handling multiple projects, meeting strict deadlines and overseeing project tasks for less experienced team members. Strong knowledge of security technologies and architecture, including encryption, cloud network security design, role-based access control, perimeter security and application security
• Prepare required systems and applications security documentation, ensuring alignment with applicable laws, regulations, policies and standards, as well as industry best practices.
• Experience leading the development of cybersecurity solutions for enterprise IT systems

Competencies and professional background

Educational Background :

• Bachelor's degree
• Minimium 7+ year's experience, 10+ ideal

Technical Skills: (knowledge, experiences, IT tools/software, languages)

• CISSP (Certified Information Systems Security Professional) or CRISC (Certified Risk and Information Systems Control) certification or Cybersecurity domain-related industry-recognized certification
• Working knowledge of project management methodology
• Knowledge of Cybersecurity threats and emerging security issues
• Experience developing or recommending analytic approaches or solutions to problems and situations for which information is incomplete or for which no precedent exists
• Experienced in conducting security review of systems
• Strong knowledge of cybersecurity principles and industry best practices, relevant to confidentiality, integrity and availability
• Working knowledge of National Institute of Standards & Technology (NIST) or other recognized frameworks, such as Control Objectives for Information and Related Technology (COBIT), MITRE AT@CK Framework, or ISO27001 is highly desirable