Strategic Security Architect

SunTrust seeks a Strategic Security Architect with a strong combination of technical information security knowledge, and business savvy to join our growing Enterprise Technology Risk Management group(ETRM) in Atlanta, GA.  This position is responsible for enterprise strategic security planning within the Security Operations and Assurance department.  Responsibilities include:

 

-  Planning, developing and socializing a long-term enterprise security roadmap, to include:

-  Identifying and planning key security program elements

-  Recommending the design and implementation of application and infrastructure solutions that provide a balance between risk management and business needs

-  Acting as a liaison to security analysts and management within Enterprise Technology Risk Management (ETRM) to facilitate the development and implementation of a long-term security plan

-  Providing strategic security planning expertise and guidance to various technology groups and architecture functions

-  Working with security staff to identify emerging threats related to the security industry and analyzing the affects on security planning

-  Developing or enhancing current processes for maintaining the enterprise security roadmap

-  Providing technical expertise and guidance for the procurement and administration of security tools

-  Researching, evaluating, designing and recommending new or improved security software or devices

-  Consulting with various business functions, information technology peers, and information security staff members to further their understanding of sound information security practices and tools

-  Assessing existing and new information technologies and business processes in an effort to address business needs and ensure effective and efficient security controls

-  Participating in projects and providing security expertise and guidance with an objective of determining and implementing efficient, effective, and appropriate security controls that address business needs.

 

Minimum Qualifications Required:

 

-  5-7 years leadership experience in a technical area.

-  5-7 years information security experience, focused on distributed and network based systems.

-  Professional level information security certification such as CISA or CISSP required.

High degree of technical experience and knowledge, specifically:

-  Knowledge of advanced information security and cryptography concepts

-  Knowledge of web applications security:  HTTP, HTTPS, SSL, SSH protocols, authentication methods, authorization, data validation and related problems (XSS, SQL injection), etc.

-  Knowledge of networking (protocols, applications, and devices)

-  Experience in complex network environments and/or design of the network infrastructure for an organization.

-  Experience with Linux/Unix and Microsoft operating systems (Windows 2000, Windows XP and Windows 2003)

-  Knowledge of intrusion detection systems and security vulnerability management

-  Experienced in computer forensics and security incident response management

 

Demonstrated competencies in the following areas:

 

-  Information security

-  Ability to interact with and present to high level executive management

-  Talent Management

-  Financial Management

-  Leadership

-  Results-oriented

-  Client focused/excellent customer service

 

For consideration, please express interest to job number 104746 in the careers section of http://www.suntrust.com.