JOB SUMMARY

As a Cloud Security Architect, you will paly a key leadership role in the success of the security operations program by providing guidance on cloud security related issues, including but not limited to technical infrastructure, process, design, assessment, implementation, awareness, and governance. The Sr. Cloud Security Architect will provide leadership, experience, and expertise to project teams on driving the cloud architecture of BSWH to be secure, auditable, and of course, usable by our customers. You will serve as a security subject matter expert as part of an in-house, on-shore, and off-shore security architect team responsible for securing the enterprise information and its systems by determining security requirements across enterprise projects; planning, designing, and documenting security systems; preparing security standards, policies and procedures

ESSENTIAL FUNCTIONS OF THE ROLE

• Serve as a key player in the security architect team, responsible for securing enterprise information and systems
• Plan, design, and document SaaS, IaaS, security systems
• Assist in preparing security standards, policies, and procedures for projects involving SaaS, Iaas, PaaS
• Utilize SIEM for monitoring, analyzing, and responding to security events and incidents
• Provide technical and operational security expertise to cross-functional teams
• Collaborate with on-shore and off-shore teams to implement security requirements across the enterprise
• Focus on Cloud and participate in the CASB/ZTN/SASE roadmap and planning with other Sr. Security architects, ensuring compliance with healthcare industry regulations and standards
• Serve as a key player in Cyber Intelligence Planning (CI-WRL-004)
• Advance the functionality of the SIEM, including correlation across cloud-sourced indexes, ultimately leveraging ML and AI

KNOWLEDGE, SKILLS AND ABILITIES

Systems Analysis

• T1035: Determine how threat activity groups employ encryption to support their operations
• T1354: Identify system cybersecurity requirements
• K0018: Knowledge of encryption algorithms
• K0689: Knowledge of network infrastructure principles and practices
• K0718: Knowledge of network communications principles and practices
• K0915: Knowledge of network architecture principles and practices
• K1037: Knowledge of target critical capabilities
• K1052: Knowledge of the Tasking, Collection, Processing, Exploration, and Dissemination (TCPED) process
• K1101: Knowledge of data modeling and predictive analytics techniques for cybersecurity applications

Knowledge Management

• K0674: Knowledge of computer networking protocols
• K0680: Knowledge of cybersecurity principles and practices
• K0751: Knowledge of system threats
• K0752: Knowledge of system vulnerabilities
• K0977: Knowledge of intelligence collection management tools and techniques
• K1005: Knowledge of data lifecycle management, including data storage, retrieval, and archival
• K1100: Knowledge of data governance frameworks and best practices for ensuring data quality and integrity
• S0506: Skill in data visualization tools and techniques to communicate complex security concepts

Analyze:

All-Source Analysis

• T0718: Identify intelligence gaps and shortfalls
• T1020: Determine the operational and safety impacts of cybersecurity lapses
• T1657: Develop a diverse program of information materials
• T1661: Asses all-source data for intelligence or vulnerability value
• K1005: Knowledge of intelligence collection capabilities and applications
• K1029: Knowledge of statistical analysis methods and tools for analyzing security event data
• S0709: Skill in developing and applying machine learning algorithms to detect cybersecurity threats
• S0783: Skill in creating decision support materials using data-driven insights

Oversee and Govern

Strategic Planning and Policy

• T1036: Integrate leadership priorities
• T1718: Implement changes to planning policies and procedures
• T1729: Synchronize intelligence planning activities and operational planning timelines.
• T1779: Coordinate strategic planning efforts with internal and external partners.
• K0676: Knowledge of cybersecurity laws and regulations
• K0734: Knowledge of Risk Management Framework (RMF) requirements
• K0983: Knowledge of data privacy laws and their implications on cybersecurity practices.
• S0763: Skill in integrity organization objectives with data strategy to enhance decision-making.

Performs other position appropriate duties as required in a competent, professional, and courteous manner

BENEFITS

Our competitive benefits package includes the following

• Immediate eligibility for health and welfare benefits
• 401(k) savings plan with dollar-for-dollar match up to 5%
• Tuition Reimbursement
• PTO accrual beginning Day 1

Note: Benefits may vary based upon position type and/or level

PREFERRED CERTIFICATIONS

• Certified Information System Security Professional (CISSP) certification
• Certified Information Security Manager (CISM) certification
• CompTIA Advanced Security Practitioner (CASP+)

QUALIFICATIONS

• EDUCATION - Bachelor's or 4 years of work experience above the minimum qualification
• EXPERIENCE - 7 Years of Experience

Logo

About Baylor Scott & White Health

Baylor Scott & White Health (BSWH) is the largest not-for-profit health care system in Texas and one of the largest in the United States. With a commitment to and a track record of innovation, collaboration, integrity and compassion for the patient, BSWH stands to be one of the nation’s exemplary health care organizations. Our mission is to serve all people by providing personalized health and wellness through exemplary care, education and research as a Christian ministry of healing. Joining our team is not just accepting a job, it’s accepting a calling!

Connections working at Baylor Scott & White Health

More Jobs from This Employer

https://careers.qualityforum.org/jobs/20449485/sr-cloud-security-architect