Director Cyber Security and Architecture & Engineering

Additional Responsibilities include:

• Responsible for sharing concerns and guidance with clients and internal team members on these subjects in a timely and effective manner.
• Reviewing and/or designing secure architectural designs for CIRCOR based on requirements, security architectural best practices, and operational needs. This work may be performed across on-prem, cloud or hybrid cloud environments in existence or planned.
• Security architects provide the following services:




• Provide security architecture advisory and guidance.
• Assess project requirements related to security requirements standards and provide architectural recommendations.
• Identify architectural security risks associated with proposed changes/solutions and compensating/mitigating controls where necessary.
• Identify gaps in existing security related capabilities to meet best practices.
• Assess and/or create low level and high-level architecture designs.
• Assess and/or create reference and solution architectures.
• Facilitate and advise on the collection of business requirements pertaining to security.
• Contribute to strategic planning/road mapping initiatives related to security architecture.
• Review of the current environment, specifically reviewing administrative, technical, and physical controls based on the client's industry and risk tolerances.
• Work closely with other IT teams on the selection of security tools and solutions, as well as architecting the implementation of said tools.
• Conduct assessments on tools and environments based on industry best practices and standards.

Requirements

• 10+ years' experience in Technology and Cybersecurity.
• 5+ years' experience in security architecture.
• Deep experience in either infrastructure related security or application security as a primary focus.
• Experience with security best practice frameworks and controls including NIST.
• Experience with architectural methodologies and frameworks
• Familiarity with current and evolving security related compliance requirements