The Senior Architect, Information Architect reports to the Director, Information Security is responsible for developing and maintaining the enterprise information security architecture along with developing and enforcing information security technology standards, roadmap, and governance. The Senior Architect collaborates with other Technical Architects across the ITS domain Senior to develop and maintain technology roadmap components to optimize security architecture processes and drive ITS innovation in support of AARP business objectives. The Senior Architect is expected to demonstrate leadership expertise to execute strategic direction as well as significant depth of technical expertise in information security management and infrastructure technical architecture.
Functional/Technical Responsibilities
- Develop, execute and maintain enterprise information security architecture for the AARP organization.
- Collaborate across ITS domain to implement and maintain information security roadmap components.
- Drive linkage and mapping of AARP business functions and information security needs to applications, systems and technical infrastructure.
- Develop and enforce information security architecture standards (enterprise computing, Cloud, network, , virtualization, etc.) and best practices as well as enterprise technology platform standards [operating system, database servers, application servers, application integration (ESB), virtualization, Cloud, etc.]
- Provide guidance to infrastructure development projects and partner with Enterprise and Mainframe Computing Directors to determine when it is necessary to modify technical architecture to accommodate information security needs.
- Partner with other technical architects to evaluate current software and hardware capabilities, identify gaps and develop recommendations to modernize the infrastructure stack.
- Develop technical information security selection standards and collaborate with ITS domain leads in the design of standard configurations for enterprise security components.
- Research and assess the feasibility of new initiatives and emerging information security technologies and opportunities, lead pilot studies and address organizational sustainability, risks and challenges.
- Develop, communicate and drive implementation of information security architecture standards.
- Lead analysis of technology, industry and market trends; determine potential impact on enterprise.
- Provide insight and support in the development and implementation of the Enterprise Architecture standards, artifacts and modeling tools.
The Senior Architect, Information Security role is a thought leadership position that requires a combination of requisite technical skills and subject matter expertise and the ability to provide direction and guidance to ITS Senior Leadership, analysts, developers and program managers. The Senior Architect is expected to execute on tactical day-to-day initiatives set forth by the VP/CTO function. This person will be expected to operate autonomously for the majority of activities as well as apply independent judgment on key technical issues as necessity dictates. This position requires a high degree of innovation and conceptualization of moving ITS and AARP forward in terms of its IT agility, value and alignment with the business goals.
Key Responsibilities include:
- Work in partnership with ITS Leadership and Staff on initiatives related to technology evaluation and roadmap creation and continuously improve policies, standards and procedures by anticipating issues,
- Execute on and provide input to the operational and capital budgets for Information Security.
- Manage the day-to-day execution of new technology evaluation and sunset/upgrade roadmap development.
- Serves as technical consultant for Advisors, Analysts, Developers and Project Managers ensuring alignment with technology evaluation.
- Serve as technical mentor for staff, ensuring optimization of skill set enhancement.
- Assist with hiring and developing strong staff members.
Desired Education
- MSCE/MCSD Certification
- CISSP, CISM, CISA
Required Competencies
- Communication
- Programming
- CISSP/ISSAP certifications preferred
- ISO/IEC 27001/27002, ITILv3, COBIT
- VMware VCP, VCP-Cloud or VCP5 Certification
- Cisco CCNP or CCDP Certification
- Security Enablement of Business and Data Protection
- Customer Awareness and Demand for Security
- Strong understanding of Compliance and Regulations
- Strong understanding of demand for managed services
Candidate Qualifications:
- 10 to 12 years related experience in enterprise computing, network management, and Information Security (InfoSec) management.
- Knowledge and application of principles of enterprise architecture and information architecture.
- Knowledge of various programming languages and development tools, including (but not limited to) Oracle/Microsoft development tools, Java, VB, C++, and XML.
- Extensive experience in designing and implementing information security management systems (ISMS), policies and standards.
- Extensive experience in developing enterprise class data models and associated information architecture artifacts.
- Experience in application design, data modeling and executing against overall enterprise architecture strategy.