IT785 - Principal Info Sec Tech

The Principal Information Security Technologist is a key senior-level technology partner with broad and comprehensive responsibility for conceptual information security design and implementation of technology solutions that support business needs and deliverables, leading to substantial and direct revenue/cost savings as well as protecting the organization. The individual ensures development and design governance specific to security threats across projects that span multiple application platforms (including in-house solutions, modulating Commercial Off-the-Shelf (COTS) applications and Software as a Service Application (SaaS)), as well as the infrastructure solutions that deliver full platform functionality that efficiently and effectively service key business processes.

1. Provide leadership and expertise in engineering and architecture efforts for information security technology solutions to support key business needs and deliverables; ensure governance across projects, applications and infrastructure.

2. Lead product and software design and development across multiple technical teams; develop short- and long-term strategies to reduce risk and align business requirements with security standards; guide problem analysis and requirements development; develop roadmaps and plans and track against such; lead build/buy decisions and vendor selection efforts; review and approve analysis, design and other work.

3. Ensure identity, data protection, and privacy measures are built into solutions delivered in production to the business, staff, faculty and students.

4. Lead technical presentations and address various topics including but not limited to security in general, risk identification/mitigation, technical standards and best practices, industry trends and up-and-coming technology, methods, techniques, etc., retrospectives and lessons learned.

5. Drive the framework for the University’s systems, infrastructure, cloud environments and solutions as it relates to security standards and compliance; develop and/or review system designs and architectures and provide security-related guidance that is aligned with regulatory and compliance requirements.

6. Assess/document existing design with respect to data privacy of existing platforms; apply critical and strategic thinking to generate ideas that will lead to the next generation of platform designs for security and privacy.

7. Participate in leadership meetings and councils regarding technical and business-driven initiatives to develop and translate security solutions to meet business needs.

8. Perform other duties as assigned or apparent.

NOTE: The Primary Accountabilities above are intended to describe the general content and requirements of the position and are not intended to be an exhaustive statement of duties. Incumbents may perform all or most of the Primary Accountabilities listed above. Specific goals or responsibilities will be documented in incumbents’ performance objectives as outlined by the incumbents’ immediate manager.

Supervisory Responsibilities

• Bachelor’s Degree and 15 years of experience working in an architecture function with knowledge and experience developing reference architectures and patterns supporting governance functions OR an equivalent combination of education and job-related experience OR

• Master’s Degree and 10 years of related experience