Data Security Architect

The Data Security Architect supports Texas Children's Third-Party Risk Management (TPRM) program by assessing the cybersecurity risks of third-party vendors, applications, cloud-hosted and SaaS solutions, artificial intelligence, and emerging technologies. This role manages the risk assessment lifecycle from intake through closure, evaluates vendor security architecture, data flows, and documentation against Texas Children's policies, standards, and regulatory requirements, and validates controls and attestations. 

The Data Security Architect documents and communicates risks, control gaps, and recommended mitigations in ServiceNow GRC, partners with business owners, vendors, and technical teams, and supports exception management, risk acceptance, process improvement, and audit activities to help protect patient and organizational data.

• Conduct cybersecurity risk assessments and reassessments of third-party vendors, applications, and technology solutions.
• Manage the third-party risk assessment lifecycle, including intake reviews, documentation requests, risk evaluation, reporting, and assessment closure.
• Review and evaluate vendor security documentation, including SOC 2 reports, ISO 27001 certifications, HITRUST assessments, security white papers, and architecture diagrams.
• Evaluate vendor security architecture, data flows, system integrations, and third-party access to identify potential cybersecurity risks.
• Assess security risks associated with cloud-hosted solutions, SaaS applications, artificial intelligence, and emerging technologies.
• Evaluate security controls against Texas Children's information security policies, standards, and applicable regulatory requirements.
• Identify, document, and communicate cybersecurity risks, control deficiencies, and recommended risk mitigation measures.
• Perform risk validation activities, review control attestations, and coordinate with responsible stakeholders to address outstanding security requirements.
• Maintain accurate risk assessment records, findings, control evidence, and supporting documentation within ServiceNow GRC.
• Collaborate with business owners, vendors, project managers, and technical teams to gather security information, clarify requirements, and communicate assessment findings.
• Monitor assessment progress, outstanding documentation, and risk validation activities to support timely completion within established service-level expectations.
• Identify material changes to existing vendor solutions that may require additional risk assessments or reassessments.
• Support security exception management, risk acceptance processes, and documentation of identified control gaps.
• Assist in developing and improving TPRM policies, procedures, assessment methodologies, reporting metrics, and operational processes.
• Support internal and external audit activities by providing third-party risk assessment records and supporting evidence.

Required:

• H.S. Diploma or GED
• 5 years of experience in information services (IS), computer management, or IS networking experience, including at least three (3) years of information security experience.

Preferred: 

• Experience in information security, cybersecurity risk assessments, third-party risk management, or Governance, Risk & Compliance (GRC).
• Knowledge of cybersecurity frameworks and regulatory requirements, including NIST, ISO 27001, HIPAA, HITRUST, and PCI DSS.
• Ability to interpret SOC 2 reports, security certifications, technical architecture diagrams, and vendor security documentation.
• Understanding of cloud security, identity and access management, encryption, vulnerability management, and data protection principles.
• Familiarity with ServiceNow GRC or comparable risk management platforms.
• Strong analytical, problem-solving, communication, documentation, and stakeholder management skills.
• Experience in healthcare or another highly regulated industry preferred.
• Relevant professional certifications such as CRISC, CISM, CISSP, CISA, or Security+ 
   

Since 1954, Texas Children’s has been leading the charge in patient care, education and research to accelerate health care for children and women around the world. When you love what you do, it truly shows in the smiles of our patient families, employees and our numerous accolades such as being consistently ranked as the best children’s hospital in Texas, and among the top in the nation by U.S. News & World Report as well as recognition from Houston Business Journal as one of this city’s Best Places to Work for ten consecutive years. 

Texas Children’s comprehensive health care network includes our primary hospital in the Texas Medical Center with expertise in over 40 pediatric subspecialties; the Jan and Dan Duncan Neurological Research Institute (NRI); the Feigin Tower for pediatric research; Texas Children’s Pavilion for Women, a comprehensive obstetrics/gynecology facility focusing on high-risk births; Texas Children’s Hospital West Campus, a community hospital in suburban West Houston; Texas Children’s Hospital The Woodlands, the first hospital devoted to children’s care for communities north of Houston; and Texas Children’s Hospital North Austin, the new state-of-the-art facility providing world-class pediatric and maternal care to Austin and Central Texas families. We have also created Texas Children’s Health Plan, the nation’s first HMO focused on children; Texas Children’s Pediatrics, the largest pediatric primary care network in the country; Texas Children’s Urgent Care clinics that specialize in after-hours care tailored specifically for children; and a global health program that is channeling care to children and women all over the world. Texas Children’s Hospital is affiliated with Baylor College of Medicine, one of the largest, most diverse and successful pediatric programs in the nation. 

 To join our community of 15,000+ dedicated team members, visit texaschildrenspeople.org for career opportunities.

 Texas Children’s is proud to be an equal opportunity employer. All applicants and employees are considered and evaluated for positions at Texas Children's without regard to mental or physical disability, race, color, religion, gender, national origin, age, genetic information, military or veteran status, sexual orientation, gender identity, marital status or any other protected Federal, State/Province or Local status unrelated to the performance of the work involved.