Security IT Architect at Constellation Brands in Victor, New York

Job Description:

Job Description

Position Summary:

Reporting to the Security Operations Manager, the primary purpose of the Security IT Architect is to facilitate the development, and implementation of an enterprise security strategy and architecture that satisfies the requirements of the business while ensuring that it is aligned with enterprise architecture principles and guidelines. The successful applicant will cover all security architecture aspects in core information technology areas including system, data, networking, infrastructure, software development, Software as a Service solutions, industrial control systems/operational technology (ICS/OT), mobile, cloud, web, and digital commerce platforms. Based on security architecting best practices, the Security IT Architect will also be expected to provide guidance and hands-on experience to IT security teams in design, development, and maintenance of security solutions.

Responsibilities:

• Undertake assessments of the enterprise security architecture to establish the gap between as-is and to-be and define the roadmap to address the changes required.


• Establish written security controls and requirements for core information technology areas by evaluating business objectives and requirements, while aligning with security standards such as NIST, ISO, PCI, CIS, and CSA.


• Engage with business stakeholders to understand their requirements so that business objectives can be achieved securely or where necessary with full understanding by the correct level of governance of the risks involved.


• Define and maintain a security architecture process and artifacts (models, designs, templates) to ensure information technology initiatives are designed and built with the correct levels of security and compliance.


• Deliver continuous improvement and ongoing compliance by enhancing the security solutions portfolio to insure it maintains relevancy with business objectives, industry changes, and security architecture best practices.


• Continually evaluate new threats in core information technology areas and assess risks to identify the impact on the business while developing and implementing new security controls and requirements.


• Execute and monitor security solutions across lifecycle strategy, design, implementation, and daily operations.


• Provide security expertise in identity and access management strategies, networking, public/private/hybrid cloud infrastructures, and cloud native platforms.


• Deliver security architecture subject matter expert advice to and liaison with suppliers, vendors, and industrial control systems/operational technology (ICS/OT) teams.


• Act as a change agent within the organization and IT security team to foster overall security understanding and architecture improvements with existing IT staff as well as managed IT service providers.


• Develop executive level materials and presentations, and perform related duties and projects as assigned or requested, to improve the overall mission and vision of IT security teams.

Qualifications:

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, or Information Systems, or equivalent combination of education/professional experience in a similar role. 


• One or more technical security certifications:
  
  
  • CISSP – Certified Information Systems Security Professional
  
  
  • SSCP – Systems Security Certified Practitioner
  
  
  • CCSP – Certified Cloud Security Professional
  
  
  • CSSLP – Certified Secure Software Lifecycle Professional
  
  
  • GSEC – SANS GIAC Security Essentials
  
  
  
  


• 5+ years of full-time security focused roles delivering security architectural solutions in complex environments with extensive experience in delivering security design and deployment.


• 3+ years of experience in defining security standards and reference architectures used to guide technical resources in secure implementation and configuration for complex enterprise and industrial control systems/operational technology (ICS/OT) environments.


• Extensive experience in implementing a wide range of security solutions such as audit tools, IDS, IPS, DLP, SIEM, SOAR, SOC, firewalls, end point security, vulnerability management, access management, encryption, proxies, DDOS protections to inform technical security architectural design, particularly using cloud and other virtual technologies.


• Extensive experience in developing security strategies and solutions including the definition of security architectures and roadmaps at an enterprise level and from strategy design to implementation.


• Deep familiarity with predominant public cloud providers (AWS, Azure, GCP) and an understanding of security trends in cloud technologies for public, private and hybrid cloud deployments and digital commerce platforms.


• Use of enterprise architecture tools and approaches to model business processes and functions in the context of security assurance.


• Excellent verbal and written communication skills with demonstrable ability to build and maintain strong relations with internal and external stakeholders.


• Must be available to participate in rotating on call schedule and able to quickly respond to problems affecting security, occasionally requiring work outside normal business hours (i.e., weekends, evenings, or early mornings).

Core Competencies to be Successful:

·Customer and Quality Focus

·Seeing the Big Picture

·Teamwork and Collaboration

·Communicating and Influencing

·Delivering at a Fast Pace

·Making Effective Decisions

ADA Physical/Mental/Workplace Requirements:

·Occasional lifting up to 25 lbs.

·Sitting, working at desk/personal computer for extended periods of time

·Primary work environment is professional corporate office or remote - work from home.

·Ability to travel commercially.

Location

Victor, New York

Additional Locations

Austin, Texas, Chicago, Illinois, New York City, New York, San Francisco, California, Virtual - US

Job Type

Full time

Job Area

Information Technology

Equal Opportunity

Constellation Brands is committed to a continuing program of equal employment opportunity. All persons have equal employment opportunities with Constellation Brands, regardless of their sex, race, color, age, religion, creed, sexual orientation, national origin or citizenship, ancestry, physical or mental disability, medical condition (cancer or genetic characteristics), marital status, gender (including gender identity or gender expression), familial status, military or veteran status, genetic information, pregnancy, childbirth, breastfeeding, or related conditions (or any other group or category within the framework of the applicable discrimination laws and regulations).

Apply Now