Overview

　　We are seeking a highly skilled and experienced Information Security Architect to join our dynamic team. As a Senior Information Security Architect, you will play a pivotal role in the Research and Innovation team to come up with technology and process enhancements to improve the Bank's security posture. You will collaboratively lead our efforts to mine internal and external sources for innovation triggers, test creative ideas for viability, and hand off to respective stakeholders for scaling and implementing.

　　Responsibilities

　　Collaboratively lead the information security research and innovation program.Liaise with information security, business, and technology teams to identify and creatively solve critical business problems.Develop innovative ways to mitigate information security risks to the Bank by monitoring threat landscape and technology trends.Conduct accelerated tests to prove or disprove hypothesis for solving critical business problems, mitigate information security risks, or evaluate new security technologies.Be an industry thought leader, follow and actively participate in industry consortiums such as CSA, ISC2, ISSA, CISA, CIS, FIRST, ISF.Cloud Services Management: Optimize cloud resources for security posture enhancement, cost efficiency, and scalability.

　　Drop Incident Response and Monitoring responsibilities.

　　Technical Leadership: Facilitate knowledge sharing and cross-functional collaboration within the organization.Technical Leadership: Provide technical leadership and mentorship to the development and operations teams. Facilitate knowledge sharing and cross-functional collaboration within the organization.Research and Innovation: Stay updated on the latest cloud technologies, DevSecOps practices, and emerging security threats. Identify and implement innovative solutions to enhance system performance and security.Remote eligible.The base pay for this position is relative to your experience but the range is generally $134,000 to $232,000 per year. First Citizens offers a competitive, comprehensive benefits program which you can review here: https://jobs.firstcitizens.com/benefits.Qualifications

　　Bachelor's Degree and 10 years of experience in Information Technology including Information Security OR High School Diploma or GED and 14 years of experience in Information Technology including Information Security

　　License or Certification Type: Possesses at least one of the following security certifications: CISSP, GIAC, CISM, or OSCP Preferred

　　Skill(s): Knowledge of Forensics, Security Operations, Incident Response, Research/Threat Detection, Malware Analysis, Assessments and Penetration testing, or Secure Software Development, Proven consulting and relationship management skills as well as the ability to leverage key working relationships with business units, vendors, and IT staff, Familiarity with one or more standard security related frameworks (NIST-Cyber, CoBIT, ISO, etc.), Knowledge of security principles and their application in an enterprise IT environment, Knowledge of various platform technologies including internet, network, distributed systems, desktop computing, voice, and threat management technologies, Experienced with enterprise security controls including malware, protection, firewalls, intrusion detection systems, content filtering, internet proxies, encryption controls, and log management solutions, Knowledge of tiered application architectures, web front-ends/server-side apps, application, and relational databases, Experience with APIs: REST, SOAP, SOA and other integrations, Experience with secure application development, application security risk mitigation techniques, Understanding of application security and industry standards such as OWASP top ten and SANS top 20, Understanding of SDLC and Secure Development Lifecycle, Use of security tools and industry best practices., Knowledge of network security controls and technologies such as firewalls, intrusion detection/prevention systems, monitoring (SIEM), data loss prevention, authentication/authorization, and database security