Senior Cyber Security Architect Associate

Join our team as a Senior Cyber Security Architect Associate. In this role, you will be responsible for designing, governing, and continuously improving secure architecture across enterprise platforms, applications, and infrastructure within a regulated financial environment. You will conduct threat modeling, security design reviews, and lead cybersecurity architecture risk assessments. Additionally, you will define and maintain enterprise security architecture, embed security controls early in the project lifecycle, and ensure architectural compliance with regulatory and supervisory expectations.

• Designing, governing, and continuously improving secure architecture across enterprise platforms, applications, and infrastructure within a regulated financial environment.
• Conducting threat modeling, security design reviews, and leading cybersecurity architecture risk assessments (ISARs).
• Defining and maintaining enterprise security architecture aligned to business strategy, policies, and reference architecture for cloud, hybrid, and on-prem environments.
• Bachelor's Degree or equivalent work experience: Computer Science, Engineering or Information Technology Management, or equivalent field. - Required
• PKI architecture and governance
• Demonstrated experience operating in a shift-left security model embedded with development and business teams
• 5+ years of experience in architecture within financial services or similarly regulated industries
• Experience designing secure architectures in cloud environments (AWS mainly)
• Proven experience conducting threat modeling and architecture risk assessments
• Certificate lifecycle automation
• Deep expertise in encryption technologies, including:
• HSM deployment and management
• Key management systems (KMS)
• Cyber Security experience preferred
• TLS, mTLS, IPSec, and database encryption
• FFIEC IT Examination Handbook
• NYDFS 23 NYCRR 500
• ISO/IEC 27001 and 27002
• NIST Cybersecurity Framework (CSF)
• PCI-DSS
• NIST SP 800-53 and 800-57 (Cryptographic Key Management)
• GLBA Safeguards Rule
• Architectural governance and documentation discipline
• Cryptographic rigor and operational resilience mindset
• Ability to articulate technical risk in business terms
• ---Demonstrated working knowledge of:
• Cross-functional collaboration across engineering, infrastructure, legal, and risk teams
• Strong risk-based decision-making capability
• Experience in Microsoft Office products
• Established work history or equivalent demonstrated through a combination of work experience, training, military service, or education