SI
Enterprise Security Architect (CISSP Desired)
SGA Inc.
- 🇺🇸 United States
- Hybrid
- 12 hours ago
- Risk Management
- Penetration Testing
- DFARS
- SOX
- CISSP
- CEH
- AI
12 hours ago
Responsibilities :
This position will serve as the primary security architect for our Advance Distribution Infrastructure program. The program has multiple projects that span from Cloud or OT environment. This role will evaluate, architect and design the technical security controls for the projects, and ensure compliance with the CSF Framework. This role will also assist with the identification and evaluation of security gaps. Identify and integrate sound security controls for applications, systems, and processes for the organization.
- Serve as the primary cybersecurity liaison between business units, project teams, technology teams, vendors, and enterprise architecture to ensure solutions, technologies, and initiatives align with established cybersecurity requirements, standards, and risk management practices.
- Provide consultative guidance regarding cybersecurity requirements, approved technologies, architectural patterns, and control expectations.
- Interpret cybersecurity policies, standards, regulatory obligations, and architectural requirements and communicate their impact in a clear and actionable manner.
- Develop, maintain, and govern enterprise cybersecurity standards, technical security requirements, reference architectures, implementation patterns, and design guidance for IT, OT, cloud, and hybrid environments.
- Create and maintain security reference architectures that define approved security controls, integration patterns, and architectural approaches for common technology solutions and business use cases.
- Participate in cybersecurity assessments, architecture reviews, technical risk reviews, vulnerability assessments, penetration testing reviews, threat assessments, and compliance evaluations.
- Analyze identified security findings, vulnerabilities, architectural deficiencies, and control gaps to determine business impact, security risk, and remediation priorities.
- Provides solutions to reduce cyber risk and ensure compliance with the NIST CSF, NERC CIP, TSA Security Directives, DFARS, SOX, PCI, etc.
- Certified Information Systems Security Professional (CISSP) or one or more related Information Technology Security professional or vendor certifications (ex: CSSA, CEH, GIAC, etc.)
- 7 years of practical technical experience in an Information Security role.
- Experience implementing Security Frameworks (ISO 27000, NIST Cyber Security).
- Certified Information Systems Security Professional (CISSP), and related Information Technology Security professional or vendor certifications (ex: CEH, CSSA, GIAC, etc.)
- Security Architecture background with strong focus on infrastructure security across both IT and OT
- Experience with OT environments, including device connectivity, encryption and integrations
- Ability to evaluate sensor/device configurations, data movement, connectivity, and vendor solutions against established security standards
- Strong communication skills and ability to work across vendors, internal technical teams, risk, governance, and compliance stakeholders
- The role is focused on architecture, assessment, recommendations, and oversight rather than hands-on implementation of security tools
SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at https://sgainc.com/ .
SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company EEO page to request an accommodation or assistance regarding our policy.
#LI-AK1
Enterprise Security Architect (CISSP Desired) · SGA Inc.