Summary: The Security Architect has primary responsibility for leading the Security Engineering and Architecture function within the Bank’s Information Security team. The individual will develop and maintain the security architecture framework and strategy in accordance with the Bank’s policies, standards, and risk appetite. They will collaborate with business units, Risk Management, and Technology teams to ensure security is integrated with business and technology strategies and objectives.
Job Responsibilities:
Security Design, Architecture, and Strategy
- Lead the Bank’s Security Engineering and Architecture function.
- Develop and maintain the security architecture framework, standards, policies, and guidelines for the Bank’s IT systems and applications.
- Drive the Bank’s security architecture strategy ensuring adherence to principles of defense in depth, economy of mechanism, least privilege, and secure by default.
- Collaborate with business units, Risk Management, and Technology teams to align security architecture with the business and technology strategies and objectives.
- Provide security consulting on projects for internal clients to ensure conformity with corporate information security policy and standards.
Risk Assessment, Mitigation, and Threat Modeling
- Maintain an evolving picture of the threat landscape, trends, and emerging technologies.
- Perform security reviews of technology platforms and applications.
- Identify and evaluate security risks across technology and vendor platforms, networks, applications, and cloud environments by performing risk assessment and threat modeling activities.
- Develop and oversee execution of treatment plans to address identified risks in accordance with organizational policies, standards, and risk appetite balancing security, performance, and business needs.
- Analyze and recommend security controls and procedures in acquisition, development, and change management lifecycle of information systems, and monitor for compliance.
- Lead the assessment of security processes, platforms, and practices to identify areas for improvement.
- Ensure technology solutions have security considerations embedded throughout their lifecycle.
- Ensure ongoing compliance with regulatory requirements.
- Lead in the management and execution of large-scale projects according to project management schedules.
- Develop comprehensive project plans including milestones, resource allocation, and timelines ensuring alignment with the Bank’s security objectives.
- Coordinate with internal and external stakeholders as required to ensure on-time and on-budget delivery of projects.
- Oversee the implementation and integration of security technologies and processes.
Support Incident Response Inquiries
- Support incident response efforts by reviewing security events and escalations, performing investigations, and seeing matters through to resolution.
- Support technical investigation of security related incidents and post incident digital forensics to identify causes and recommend future mitigation strategies.
- Collaborate with technology and business organizations as appropriate.
Professional Development
- Stay abreast of relevant industry related developments, trends, and threats.
- Commit to ongoing professional education and development in the Information / Cyber Security field.
- Provide technical and strategic direction and mentorship to team members.
Other Responsibilities
- Performs other job-related duties as assigned.
Job Requirements:
- Bachelor’s degree in an IT related discipline required;
- At least 5– 8 years of experience in information technology, information security, risk, or similar field;
- 5+ years of experience in an information security role;
- 5+ years of architecture experience;
- Experience in a highly regulated industries is preferred;
- Relevant industry certifications (CCSP, CISM, CAASP+, SSCP, CNDA, CYSA+) and/or advanced degrees may be considered in lieu of experience;
- Deep expertise in secure design and architecture principles;
- Advanced knowledge of multiple security practice areas including security architecture, security engineering, identity and access management, asset management, vulnerability management, threat detection and response, endpoint security, network security, cloud security, web security, email security, data security, application security, threat intelligence;
- In-depth knowledge of regulatory frameworks including, but not limited to, NIST, PCI-DSS, SOX, FFIEC, ISO27001;
- Ability to provide risk-based recommendations balancing security, performance, and business needs;
- Ability to communicate complex security topics to technical and non-technical stakeholders;
- Commitment to ongoing professional education / training / certification in the Information / Cyber Security field.
Columbia Bank offers the following benefits:
- Medical, Dental, Vision and Rx which are contributory.
- Bonus programs.
- Employee Stock Option Program (ESOP).
- Life Insurance, Long Term Disability and Accidental Death and Dismemberment (LTD&AD&D).
- Paid Time Off (PTO) which includes Personal and Vacation Time.
- Paid Sick Time.
- Bank Holidays.
- Employees may participate in the 401k program.
Schedule:
- This role is eligible for a hybrid schedule: 3 days in the office and 2 days work from home, based on business needs. This arrangement may change without notice.
Columbia Bank and its affiliates is an Equal Opportunity Employer, including individuals with disabilities and veterans.
Skills Required
- Bachelor's degree in an IT related discipline
- At least 5-8 years of experience in information technology, information security, risk, or similar field
- 5+ years of experience in an information security role
- 5+ years of architecture experience
- Deep expertise in secure design and architecture principles
- Advanced knowledge of security practice areas: identity and access management, asset management, vulnerability management, threat detection and response, endpoint, network, cloud, web, email, data and application security, threat intelligence
- In-depth knowledge of regulatory frameworks including NIST, PCI-DSS, SOX, FFIEC, ISO27001
- Ability to provide risk-based recommendations balancing security, performance, and business needs
- Ability to communicate complex security topics to technical and non-technical stakeholders
- Commitment to ongoing professional education and development in Information/Cyber Security
- Experience in highly regulated industries
- Relevant industry certifications (CCSP, CISM, CAASP+, SSCP, CNDA, CYSA+) or advanced degrees (may be considered in lieu of experience)
What We Do
You can Count on Columbia for all your personal banking needs in New Jersey. We’re more than just a bank – we’re your personal banker for life. As the largest independent bank in New Jersey, Columbia Bank is motivated by forming long-term relationships with our customers. Our team of experienced banking professionals provides our customers and the communities of New Jersey with unprecedented service and financial security. With conveniently located full-service branches in New Jersey, we believe that’s why individuals and families across New Jersey Count on Columbia to manage their personal bank accounts. Already have a personal bank account with us? We also offer business banking services, with the same service standard and financial stability that guide our personal bank account management. Whether we are helping you achieve your financial goals or helping the communities we serve through volunteering or our Columbia Bank Foundation, we strive to make Columbia Bank a place you can count on. Better Community Banking Starts Here.
