Security Architect

Key Responsibilities

• • Ensure that security requirements are adequately addressed in all aspects of enterprise architecture, including reference models, segment and solution architectures, and the resulting systems that protect and support organizational mission and business processes.
  • Define secure baselines for secure cloud and hybrid solutions supporting government data systems.
  • Develop, maintain, and own System Security Plans (SSPs) and all supporting compliance artifacts.
  • Lead all phases of the security compliance and architecture process, from system creation through continuous monitoring.
  • Apply, interpret, and assess NIST SP 800-53 controls across system and data environments.
  • Conduct security risk assessments, gap analyses, and vulnerability remediation planning.
  • Collaborate with engineering, infrastructure, and compliance teams to enforce secure-by-design principles.
  • Manage security documentation, policies, procedures, and control evidence.
  • Support security audits, penetration testing coordination, and incident response planning.
  • Serve as a subject matter expert for data protection, encryption, and identity and access management (IAM).
  • Safeguard sensitive information and adhere to all organizational security and privacy policies, ensuring proper handling and confidentiality of data at all times.
   
   

Required Qualifications

• • Must be a US Citizen (for security clearance purposes).
  • Bachelor’s in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
  • 10+ years of cybersecurity architecture experience in federal or large enterprise environments.
  • Deep expertise in commercial security and compliance requirements, including GLBA, CCPA, FinCEN reporting, PCI-DSS, GDPR, SOC 2, and ISO frameworks.
  • Deep expertise with federal security requirements, including FISMA, FedRAMP, and NIST SP 800-53.
  • Proven experience documenting and implementing compliance requirements and developing secure architecture in regulated environments.
  • Strong knowledge of system hardening, network security, encryption protocols, and secure SDLC practices.
  • Experience securing cloud platforms such as AWS, Azure, and/or GCP in regulated environments.

Preferred Qualifications

• One or more of the following certifications: CAP, CASP, CISM, CISSP, or GSLC.
• Masters or PHD in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, or Software Engineering.
• Experience with FinTech-specific security requirements and IT systems.
• Strong written and verbal communication skills with the ability to produce audit-ready documentation.
• Experience coordinating with Security Engineers, Developers, and System Administrators.

SteerBridge is proud to be an Equal Opportunity Employer. We are committed to creating a diverse and inclusive workplace where all qualified applicants and employees are treated with respect and dignity—regardless of race, color, gender, age, religion, national origin, ancestry, disability, veteran status, genetic information, sexual orientation, or any other characteristic protected by law.

We also provide reasonable accommodations for individuals with disabilities in accordance with applicable laws. If you require assistance during the application process, we encourage you to reach out so we can support your needs.