Corporate Security Architect

Job Summary

To help establish and scale Corporate Security assessment capabilities, the full-time remote Corporate Security Architect will manage Third-Party Risk Assessments, conduct security reviews of corporate technologies, and collaborate with various stakeholders to provide actionable security recommendations and risk assessments.

Key Responsibilities

• Conduct security assessments of third-party vendors, suppliers, and service providers, documenting findings and remediation recommendations
• Perform security reviews of SaaS platforms and corporate technology solutions, providing risk-based recommendations for technology adoption
• Execute assessments according to established standards, maintain documentation, and track remediation activities while collaborating with cross-functional teams

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or a related field
• 8+ years of experience in Information Security, Security Architecture, Risk Management, or Corporate Security
• Experience operating Third-Party Risk Management (TPRM) programs and conducting security reviews of SaaS applications and cloud services
• Strong understanding of NIST CSF, ISO 27001, SOC 2, CIS Controls, and cloud security principles
• Experience reviewing vendor security documentation and performing risk-based assessments