Principal Information Security Architect
Security architect job in Boston, MA
Lumen connects the world. We are igniting business growth by connecting people, data and applications - quickly, securely, and effortlessly. Together, we are building a culture and company from the people up - committed to teamwork, trust and transparency. People power progress.
We're looking for top-tier talent and offer the flexibility you need to thrive and deliver lasting impact. Join us as we digitally connect the world and shape the future.
**The Role**
The Principal Information Security Architect provides subject matter expertise for multiple, complex security systems, including developing security architectures and roadmaps, and evaluating, planning and designing security solutions. Additionally, the Principal Architect provides subject matter expertise to Product, IT, Network, and Security teams in the implementation of recommended solutions for identified technical security issues; ensures the implementation of security solutions utilizing advanced technical expertise; serves as architecture lead on major projects with the ability and expertise to develop overall architectural direction; initiates and executes advanced research and development activities of significance to future business security strategies.
**The Main Responsibilities**
+ Drives beneficial security change into the business through the development or review of architectures to ensure that they fit business requirements for security, mitigate risks, conform to the relevant security standards, and balance information risk against the cost of appropriate countermeasures.
+ Develops and designs new security solutions to reduce risk and align business requirements with security standards. Supports vendor relationships; leads vendor reviews through RFx process, working with Procurement and appropriate business partners on requirements and success criteria. Supports development of business case and approval process.
+ Delivers guidelines, best practices, and direction on security standards/policies and roadmaps. Provides subject matter expertise, consultation, and escalation support.
+ Provides support to Security Review process by assisting with complex questions and projects. Work with business units and partners as needed.
+ Acts as liaison between the business and technology from a security perspective, maintains an overview of the environment as a whole and its security aspects, understands business strategy and how it relates to security strategy, acts as a liaison between appropriate regulatory bodies, IT auditors, and business stakeholders, educates IT and enterprise roles on the need for (and consequences of) reducing information-related risk, and ultimately drives organizational change at all levels of the business.
**What We Look For in a Candidate**
Required:
+ Bachelor's degree in computer science, engineering, or related field with 15+ years of relevant experience or
+ Master's degree in computer science, engineering, or related field with 12+ years of relevant experience.
+ Applicable professional/technical certifications must be in place, such as CISSP, GPEN, GWAPT, GISEC, CISM or CISA.
+ Knowledge of information security industry and regulatory obligations (ISO 27001/27002, NIST Framework, FISMA, FedRAMP, and GDPR).
+ Software development experience.
**Compensation**
This information reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual pay is based on skills, experience and other relevant factors.
Location Based Pay Ranges:
$149,084 - $198,779 in these states: AL, AR, AZ, FL, GA, IA, ID, IN, KS, KY, LA, ME, MO, MS, MT, ND, NE, NM, OH, OK, PA, SC, SD, TN, UT, VT, WI, WV, and WY.
$156,539 - $208,718 in these states: CO, HI, MI, MN, NC, NH, NV, OR, and RI.
$163,993 - $218,657 in these states: AK, CA, CT, DC, DE, IL, MA, MD, NJ, NY, TX, VA, and WA.
Lumen offers a comprehensive package featuring a broad range of Health, Life, Voluntary Lifestyle benefits and other perks that enhance your physical, mental, emotional and financial wellbeing. We're able to answer any additional questions you may have about our bonus structure (short-term incentives, long-term incentives and/or sales compensation) as you move through the selection process.
Learn more about Lumen's:
+ Benefits (****************************************************
+ Bonus Structure
\#LI-Remote
**What to Expect Next**
Requisition #: 340981
**Background Screening**
If you are selected for a position, there will be a background screen, which may include checks for criminal records and/or motor vehicle reports and/or drug screening, depending on the position requirements. For more information on these checks, please refer to the Post Offer section of our FAQ page (************************************* . Job-related concerns identified during the background screening may disqualify you from the new position or your current role. Background results will be evaluated on a case-by-case basis.
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
**Equal Employment Opportunities**
We are committed to providing equal employment opportunities to all persons regardless of race, color, ancestry, citizenship, national origin, religion, veteran status, disability, genetic characteristic or information, age, gender, sexual orientation, gender identity, gender expression, marital status, family status, pregnancy, or other legally protected status (collectively, "protected statuses"). We do not tolerate unlawful discrimination in any employment decisions, including recruiting, hiring, compensation, promotion, benefits, discipline, termination, job assignments or training.
**Disclaimer**
The job responsibilities described above indicate the general nature and level of work performed by employees within this classification. It is not intended to include a comprehensive inventory of all duties and responsibilities for this job. Job duties and responsibilities are subject to change based on evolving business needs and conditions.
In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.
Please be advised that Lumen does not require any form of payment from job applicants during the recruitment process. All legitimate job openings will be posted on our official website or communicated through official company email addresses. If you encounter any job offers that request payment in exchange for employment at Lumen, they are not for employment with us, but may relate to another company with a similar name.
Security Architect
Security architect job in Yarmouth, ME
Description The Security Architect is responsible for maturing the security posture of Tyler's corporate cyberinfrastructure. They are responsible for oversight of Tyler's enterprise compliance with applicable cybersecurity laws, regulations, industry frameworks, policies and standards. This is a key role in theadministration and enforcement of Tyler's Enterprise Information Security Program, which helps to ensure the security and integrity of Tyler's critical cyber infrastructure and assets.Responsibilities
Consults with business and technical leadership to ensure that data, processes and technology aredesigned for data protection and compliance
Drive creation of information security policies and procedures and assist with the related securityawareness programs to both end users and technical staff
Oversees the development, evaluation and implementation of governance and compliance andprocesses to mitigate cybersecurity risk and ensure protection of company assets and information
Standardize and streamline annual and ad-hoc information security audits and assessments incompliance with FedRAMP, CJIS, SSAE-18 SOC 1 and SOC2 and other requirements as necessary
Assist in the coordination of third parties to help complete the assessments when relevant
Assist in the monitoring and enforcement of compliance to security policies
Assist with contract and vendor management issues related to security requirements and projects
Researches and interprets current and pending laws and regulations, industry standards and clientand vendor commitments to understand and communicate compliance requirements
Monitors investigations and documentation of information security compliance issues
Provide leadership and technology guidance to Tyler business units on security matters
Review architecture of products and infrastructure designs
Qualifications
Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, MIS or equivalent or comparable experience
Requires 10+ years of progressively increasing responsibility in the areas of information security architecture, information security engineering, risk management or information technology.
Strong experience architecting secure distributed infrastructures for medium to large enterprises.
Experience with multiple operating systems, devices and databases including Windows Server, Active Directory, virtualization technology, network routing and switching, network segmentation, and use of enterprise class security platforms (F5 Networks, Gemalto, IDS/IPS, Anti-Virus, etc.) is required.
Understanding of complex local and wide-area networks that focus on the use of segmentation and protection across all layers of the OSI model.
Strong analytical and problem-solving skills.
Must have and maintain one or more Security Assurance certifications such as (ISC)2 CISSP, ISACA CISA, ISACA CISM or equivalent · Working knowledge of common information security and privacy frameworks, such as FedRAMP, CJIS, ISO 27001, PCI-DSS, SSAE 18 SOC 2, HIPAA, CCPA, etc.
Strong understanding of information security standards, concepts, controls, testing techniques and technical risk assessment.
Working knowledge of industry software security testing procedures such as the OWASP Top 10 that includes but not limited to thick client, web client, and API security testing.
Experience with enterprise architecture and working as part of a cross-functional team to implement solutions.
Excellent customer service, organizational, interpersonal and communication skills
Ability to prioritize and complete multiple tasks in a fast-paced, technical environment
Some travel (approximately 2-3 trips per year) may be required.
Required to undergo and satisfactorily pass a fingerprint background check in accordance with CJIS requirements.
The Security Architect must be able to:
Understand information security concepts such as Security Architecture and Design, Information Security Standards and Technical Security Risk Assessment
Translate security control language into natural human language to aid in speed and accuracy of implementation
Provide seamless integration to department and company resources
Perform process development, consolidation and optimization at an enterprise level
Independently gain knowledge on new and emerging trends.
Auto-ApplyLead Security Architect (Director level, individual contributor)
Security architect job in Boston, MA
At Manulife, we are changing the way we unlock value and secure the enterprise through technology and we want you to be part of it! We are growing our cybersecurity program with the vision to deliver quality applications using AI that add value to our customers, faster and securely, at scale. The customer is at the focus of everything we do, and millions of end users rely on our products daily. We are building a state-of-the-art cybersecurity program to better protect the firm's critical assets.
As a Lead Security Architect, you'll be responsible for designing, developing, and implementing robust security strategies and solutions to protect Manulife's digital assets from advanced cyber threats. In this hub-and-spoke model, you will report to the Chief Security Architect and will be the dedicated security architecture lead for a specific business unit, ensuring alignment with the global security framework while addressing the unique needs of the segment. You will play a crucial role in shaping our global security posture and ensuring security is a foundational element of our technology and business initiatives.
Office location: Toronto - Canada (ideal) or Boston - USA.
Work arrangement: Hybrid (3 days in office, 2 days from Home); Remote working option is not available.
Travel Flexibility: Willingness and ability to travel within Canada and USA to support business operations and stakeholder engagement.
Position Responsibilities:
* Architectural Design: Lead the design and development of robust security frameworks, standards, and best practices for global systems, data, and networks. This includes creating reference architectures and implementation patterns for security solutions.
* Strategic Planning: Translate business, technology, and threat drivers into practical security roadmaps. You'll ensure our security strategy is aligned with broader organizational goals.
* Financial Analysis: Conduct financial evaluations of security technologies, including quantifying purchasing and licensing options, estimating labor costs, and calculating the total cost of ownership (TCO), return on investment (ROI), or payback period.
* Project Management: Draft project plans for security service and technology deployments and coordinate with stakeholders across the organization to ensure successful implementation.
* Collaboration & Integration: Work closely with various teams across Manulife's business and IT units-including enterprise architecture, development, and risk management-to seamlessly integrate security throughout the entire project lifecycle.
* Risk Management: Conduct comprehensive risk assessments to identify vulnerabilities and define necessary controls. Partner with global information risk management teams to prioritize and mitigate risks effectively.
* Security Evaluation: Continuously evaluate the security of new and emerging technologies and potential solutions. You will stay ahead of the curve on cybersecurity trends to recommend and implement innovative solutions.
* Mentorship & Communication: Act as a security subject matter expert, coaching and mentoring development teams. You will also communicate complex security standards and strategies to both technical staff and senior management with clarity and influence.
* AI Security: Design and implement security frameworks for Machine Learning (ML), Generative AI (GenAI), and Agentic AI systems. Evaluate AI-powered security tools and integrate artificial intelligence capabilities into security operations and threat detection.
* Domain-Specific Accountabilities:
* Application Security: Assess solution architectures for compliance with security standards, define secure service interfaces, and provide guidance to application security engineers on threat modelling and secure software development methodologies.
* Cloud Security: Provide deep expertise in securing multi-cloud computing environments (SaaS, IaaS, PaaS), with a strong focus on platforms like Microsoft Azure and AWS.
Required Qualifications:
* To succeed in this role, a candidate must have a strong blend of technical expertise, professional experience, and interpersonal skills.
* Education & Certifications:
* Bachelor's or master's degree in computer science, information systems, cybersecurity, or a related field.
* Relevant industry certifications such as CISSP (Certified Information Systems Security Professional) or CCSP (Certified Cloud Security Professional) are required.
* Experience:
* At least 10 years of experience specifically in senior information security architecture roles, with demonstrated progression in responsibility and complexity.
* Proven experience in the financial services industry, with understanding of regulatory requirements, compliance frameworks, and industry-specific security challenges.
* Experience in using architecture methodologies such as SABSA, Zachman, and/or TOGAF.
* Direct, hands-on experience or strong working knowledge of managing security infrastructure-e.g., firewalls, intrusion prevention systems (IPSs), web application firewalls (WAFs), endpoint protection, SIEM, and log management technology.
* Verifiable experience reviewing application code for security vulnerabilities.
* Experience securing CI/CD pipelines.
* Direct, hands-on experience or a strong working knowledge of vulnerability management tools.
* Documented experience and a strong working knowledge of the methodologies to conduct threat-modelling exercises on new applications and services.
* Experience designing the deployment of applications and infrastructure into public cloud services.
* Direct experience designing IAM technologies and services, including Active Directory, Lightweight Directory Access Protocol (LDAP), and Amazon Web Service (AWS) IAM.
* Extensive knowledge of full-stack IT infrastructure, including:
* Applications
* Databases
* Operating systems-Windows, Unix, and Linux
* Hypervisors
* IP networks-WAN and LAN
* Storage networks-Fibre Channel, iSCSI, and NAS
* Backup networks and media
* Containers/Kubernetes
* Soft Skills:
* Communication: Excellent verbal and written communication skills are crucial for articulating complex technical concepts and influencing stakeholders at all levels. You must be able to translate complex security matters into business terms that are easily understood by colleagues and senior management.
* Problem-Solving: Strong analytical, problem-solving, and decision-making abilities.
* Collaboration: The capacity to balance competing priorities and maintain a collaborative and positive attitude.
* Travel Flexibility: Willingness and ability to travel within Canada and USA to support business operations and stakeholder engagement
Preferred Qualifications:
* Experience from large complex environment is highly preferred but not a must.
* Experience from large financial Org's is a definite plus but not a must.
When you join our team:
* We'll empower you to learn and grow the career you want.
* We'll recognize and support you in a flexible environment where well-being and inclusion are more than just words.
* As part of our global team, we'll support you in shaping the future you want to see.
About Manulife and John Hancock
Manulife Financial Corporation is a leading international financial services provider, helping people make their decisions easier and lives better. To learn more about us, visit *************************************************
Manulife is an Equal Opportunity Employer
At Manulife/John Hancock, we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour, ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.
It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process. All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies. To request a reasonable accommodation in the application process, contact ************************.
Referenced Salary Location
Toronto, Ontario
Working Arrangement
Hybrid
Salary range is expected to be between
$132,900.00 CAD - $182,900.00 CAD.
If you are applying for this role outside of the primary location, please contact ************************ for the salary range for your location. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance.
Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact ************************ for more information about U.S.-specific paid time off provisions.
Auto-ApplyPrincipal Cloud Security Architect
Security architect job in Boston, MA
Role OverviewThe Principal Cloud Security Architect evaluates cloud architectures, identity models, permissions, and security controls across large-scale environments. This role focuses on identifying architectural risks, misconfigurations, and long-term security design gaps.
What You'll Do- Assess cloud architectures (AWS, Azure, GCP) for security gaps - Review IAM configurations, network segmentation, and resource policies - Identify misconfigurations, privilege risks, and insecure patterns - Summarize architectural flaws and provide structured mitigation guidance - Validate alignment with security frameworks and best practices - Support recurring assessments of cloud environments and deployment patterns What You BringMust-Have:- Deep experience in cloud security architecture - Strong understanding of IAM, network design, and cloud service models - Ability to document complex architectures in clear, structured form Nice-to-Have:- Experience with multi-cloud, zero-trust, or high-compliance environments
Auto-ApplyGoogle Cloud Security Architect
Security architect job in Boston, MA
Who You'll Work With As a modern technology company, our Slalom Technologists are disrupting the market and bringing to life the art of the possible for our clients. We have passion for building strategies, solutions, and creative products to help our clients solve their most complex and interesting business problems. We surround our technologists with interesting challenges, innovative minds, and emerging technologies
As a Consultant or Senior Consultant, you will collaborate with cross-functional teams, including IT, security, and business units, to design and implement Google Cloud-based application innovation solutions. You will work alongside experienced cloud architects, data scientists, and other specialists, ensuring the successful delivery of scalable, cloud-native applications and AI-powered solutions.
What You'll Do
* Stay current with security trends, technologies, and best practices around Google Cloud solutions, leveraging tools like Cloud IAM, Cloud Security Command Center, BeyondCorp, and Cloud Armor.
* Define and guide transformational security strategies for Google Cloud environments, ensuring alignment with Google's Zero Trust and BeyondCorp principles.
* Translate complex regulatory requirements (e.g., GDPR, SOC 2, HIPAA) and technology standards into actionable functional and technical requirements for cloud and hybrid environments, ensuring security and compliance.
* Lead teams through various phases of gap analyses, including security assessments, remediation planning, roadmap development, and implementation of remediation actions using Google Cloud-native tools.
* Deliver on the vision, architecture, execution, and quality assurance of security projects on Google Cloud, driving initiatives that secure enterprise workloads and data.
* Guide stakeholders and senior leaders on aligning security solutions with broader business goals, ensuring the architecture follows Google Cloud's security best practices and roadmap.
* Establish security architecture patterns based on Google Cloud security frameworks and industry standards to meet the unique needs of enterprise clients.
* Collaborate with other Google Cloud architects and security teams to continuously improve security knowledge assets and best practices, ensuring the most effective security solutions for clients.
* Design and architect solutions to secure Generative AI models and applications against adversarial attacks, prompt injection, and their potential misuse for malicious cyber activities.
What You'll Bring
* Proven experience with Google Cloud security architecture, with hands-on experience in tools like Cloud IAM, VPC Service Controls, Cloud DLP, and Cloud Armor.
* Strong background in defining and implementing Zero Trust and BeyondCorp security models within Google Cloud environments.
* Familiarity or direct experience with Identity and Access Management (IAM), Data Protection, Vulnerability Management, and Cloud Security solutions in Google Cloud.
* Extensive experience with security design patterns specific to Google Cloud, as well as hybrid and multi-cloud security architecture.
* Experience in security and risk advisory consulting, particularly related to cloud security transformations.
* Ability to lead the development and implementation of cloud security roadmaps aligned with business goals and compliance needs.
* Familiarity with Google Cloud's Artificial Intelligence (AI) capabilities (e.g., Vertex AI, Generative AI services, Model Armor) including their applications, associated security risks (e.g., prompt injection, data poisoning, privacy concerns), and proven strategies for implementing security controls, governance, and responsible AI practices.
* Relevant certifications are strongly desired, including (but not limited to):
* GCP Professional Security Engineer
* GCP Professional Cloud Architect
* CISSP
* Security+
About Us
Slalom is a fiercely human business and technology consulting company that leads with outcomes to bring more value, in all ways, always. From strategy through delivery, our agile teams across 52 offices in 12 countries collaborate with clients to bring powerful customer experiences, innovative ways of working, and new products and services to life. We are trusted by leaders across the Global 1000, many successful enterprise and mid-market companies, and 500+ public sector organizations to improve operations, drive growth, and create value. At Slalom, we believe that together, we can move faster, dream bigger, and build better tomorrows for all.
Compensation and Benefits
Slalom prides itself on helping team members thrive in their work and life. As a result, Slalom is proud to invest in benefits that include meaningful time off and paid holidays, parental leave, 401(k) with a match, a range of choices for highly subsidized health, dental, & vision coverage, adoption and fertility assistance, and short/long-term disability. We also offer yearly $350 reimbursement account for any well-being-related expenses, as well as discounted home, auto, and pet insurance.
Slalom is committed to fair and equitable compensation practices. For this position the base salary pay ranges are listed below. In addition, individuals may be eligible for an annual discretionary bonus. Actual compensation will depend upon an individual's skills, experience, qualifications, location, and other relevant factors. The salary pay range is subject to change and may be modified at any time.
East Bay, San Francisco, Silicon Valley:
* Consultant: $120,000-$177,000
* Senior Consultant: $140,000-$203,000
San Diego, Los Angeles, Orange County, Seattle, Houston, New Jersey, New York City, Westchester, Boston, Washington DC:
* Consultant: $110,000-$162,000
* Senior Consultant: $130,000-$186,000
All other locations:
* Consultant: $105,000-$148,000
* Senior Consultant: $115,000-$171,000
EEO and Accommodations
Slalom is an equal opportunity employer and is committed to inclusion, diversity, and equity in the workplace. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veterans' status, or any other characteristic protected by federal, state, or local laws. Slalom will also consider qualified applications with criminal histories, consistent with legal requirements. Slalom welcomes and encourages applications from individuals with disabilities. Reasonable accommodations are available for candidates during all aspects of the selection process. Please advise the talent acquisition team if you require accommodations during the interview process.
We are accepting applications until 12/31.
Director, Information Security
Security architect job in Boston, MA
At DraftKings, AI is becoming an integral part of both our present and future, powering how work gets done today, guiding smarter decisions, and sparking bold ideas. It's transforming how we enhance customer experiences, streamline operations, and unlock new possibilities. Our teams are energized by innovation and readily embrace emerging technology. We're not waiting for the future to arrive. We're shaping it, one bold step at a time. To those who see AI as a driver of progress, come build the future together.
The Crown Is Yours
As a Director, Information Security, you'll lead our Security Engineering and Security Operations teams to shape how we defend our platforms at scale. You'll build modern security programs grounded in automation, AI, and pragmatic risk management. You'll drive strategy, deliver key capabilities, and evolve our approach to detection, response, and resilience. This is a hands-on leadership role where you'll empower technical leaders, elevate team performance, and partner closely with Engineering, Legal, IT, and Information Security leadership.
What You'll Do
Lead a high-performing team of managers and senior individual contributors; foster growth through coaching, clarity, and development planning.
Provide strategic direction and mentorship to the broader InfoSec team through skip levels, feedback loops, and leadership modeling.
Define and communicate KPIs to drive the program, looking across operational impact as well as technical indicators of risk and drift toward failure.
Partner with InfoSec leadership on roadmap planning, prioritization, risk management, and capability development across detection, response, engineering, and investigations.
Advance our adoption of AI and automation to drive quantifiable impact across security functions, both in new capabilities and latency.
Collaborate with Legal, Compliance, and Audit to meet regulatory and customer expectations.
What You'll Bring
At least 10 years of progressive experience in security, including 5+ years in leadership roles with a strong emphasis on both proactive security engineering and reactive security operations.
Strong technical foundation in modern enterprise and cloud environments, including what we secure (AWS, GCP, Kubernetes, datacenters, IoT) and what we secure it with (SIEM, EDR, CSPM, SAST/DAST, IAM, forensics).
Familiarity with industry-standard risk and compliance frameworks (NIST CSF, ISO 27001, SOC 2, SLSA) and how to operationalize them in modern, tech-forward environments.
Experience in fast-paced, high-growth companies in enterprise tech, SaaS, gaming, or other technical consumer industries like online video gaming.
Executive-level communication skills, including the ability to deliver clear, timely, and actionable updates to both technical stakeholders and executive leadership.
Join Our Team
We're a publicly traded (NASDAQ: DKNG) technology company headquartered in Boston. As a regulated gaming company, you may be required to obtain a gaming license issued by the appropriate state agency as a condition of employment. Don't worry, we'll guide you through the process if this is relevant to your role.
The US base salary range for this full-time position is 216,000.00 USD - 270,000.00 USD, plus bonus, equity, and benefits as applicable. Our ranges are determined by role, level, and location. The compensation information displayed on each job posting reflects the range for new hire pay rates for the position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific pay range and how that was determined during the hiring process. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Auto-ApplyDirector, Information Security
Security architect job in Boston, MA
Extensive knowledge of HIPAA and HITECH. Knowledge of and experience with Information Security frameworks such as HiTRUST, NIST, or ISO 27001. Bachelor's degree in information security, information assurance, information technology, computer science, or a related discipline.
Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or related certification.
Five (5) years in an information security operations or management role.
Passion for the mission of Health Leads and strong commitment to Health Leads' core values: belief in collective strength and the power of shared work, constant and courageous learning, celebrating our victories and each other, and stepping up leaders in a common vision.
Experience with information security for cloud environments and/or software-as-a-service (SaaS) platforms.
Knowledge of security-related technologies and processes, including but not limited to: data loss prevention (DLP), identity and access management (IAM), endpoint security, vulnerability and configuration management, security information and event management (SIEM), incident response and digital forensics, disaster recovery/business continuity planning, network security (LAN/WAN).
Ability to communicate complex ideas and information both
verbally
and writing, in a clear, concise, and effective manner to technical and non-technical audiences including customers and colleagues.
Superior capabilities for partnering;
ability to be effective as both a team member and as a leader of teams in defining objectives, staying on task and reaching consensus;
soliciting participation, challenging ideas and summarizing accomplishments and planned actions.
Show integrity and ethical behavior; respect confidentiality, business ethics and organizational standards.
Ability to
formulate
the cost benefit of security initiatives in the context of
overall
business risk mitigation and the organization's operational objectives.
Ability to compare, contrast and
prioritize
among alternative approaches to meet those objectives.
Senior Information Security Engineer
Security architect job in Boston, MA
At WHOOP, we're on a mission to unlock human performance. WHOOP empowers members to perform at a higher level through a deeper understanding of their bodies and daily lives. WHOOP is seeking a Senior Information Security Engineer to serve as a technical leader in our Security team reporting to our Information Security Manager. In this role, you will drive the deployment and continuous enhancement of controls that protect millions of users' biometric and health data, build scalable defenses across our infrastructure and applications, and lead incident response efforts with visibility across the business. This is an opportunity to have direct impact at scale, working alongside engineers, product teams, and executives to drive forward-looking security strategies. RESPONSIBILITIES:
Implement and enhance security controls by leading the deployment, integration, and tuning of solutions such as CNAPP, SIEM, CASB, EDR, DLP, and MDM to maximize effectiveness.
Support security design decisions by providing subject matter expertise on cloud and SaaS security best practices while influencing architecture led by the Security Architect role.
Lead incident response and investigations by guiding containment, remediation, root cause analysis, and post-incident improvements.
Strengthen application security by overseeing secure development practices and managing SAST, SCA, and DAST tooling.
Advance identity and access management by supporting IAM policy enforcement, SSO, MFA, SCIM, RBAC, and user lifecycle governance.
Secure AI systems and integrations by assessing and protecting embedded APIs and organizational AI tool usage to ensure resilience, privacy, and compliance.
Collaborate cross-functionally by working with Engineering, IT, and GRC teams to embed security into systems and workflows.
Mentor and influence by providing technical guidance, reviewing work, and promoting security-first thinking across the organization.
Stay ahead of threats and regulations by tracking emerging risks, technologies, and compliance requirements to inform forward-looking strategies.
Participate in and help improve the on-call rotation by providing guidance, escalation support, and driving improvements in response processes.
QUALIFICATIONS:
Bachelor's degree in Computer Science, Information Security, or a related technical field and/or advanced certifications (CISSP, CISM, AWS Security Specialty, SANS, etc.).
8+ years of hands-on experience in Information Security, IT Security, or a related role, including at least 2 years in a senior or lead capacity.
Proven track record implementing and managing advanced security technologies (e.g., CASB, CNAPP, CSPM, SIEM, SOAR, DLP, SWG).
Experience securing AI/ML systems or APIs, including governance of third-party AI integrations and organizational use of AI tools.
Strong understanding of modern cloud security architecture (AWS, Azure, GCP) and experience performing threat modeling and risk assessments on cloud-based systems.
Hands-on experience with application security tooling (SAST, SCA, DAST) and embedding secure development practices.
Demonstrated leadership in security incident response, investigations, and root cause analysis.
Effective communicator with the ability to influence stakeholders and explain security concepts to technical and non-technical audiences.
Strong project management skills and the ability to drive initiatives to completion in a fast-paced environment.
Experience mentoring engineers and setting operational standards.
Familiarity with compliance and risk frameworks relevant to health and AI (SOC 2, ISO 27001, PCI, GDPR, FTC guidance, HIPAA-adjacent state laws) is a plus.
Interested in the role, but don't meet every qualification? We encourage you to still apply! At WHOOP, we believe there is much more to a candidate than what is written on paper, and we value character as much as experience. As we continue to build a diverse and inclusive environment, we encourage anyone who is interested in this role to apply.
WHOOP is an Equal Opportunity Employer and participates in E-verify to determine employment eligibility. It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
The WHOOP compensation philosophy is designed to attract, motivate, and retain exceptional talent by offering competitive base salaries, meaningful equity, and consistent pay practices that reflect our mission and core values.
At WHOOP, we view total compensation as the combination of base salary, equity, and benefits, with equity serving as a key differentiator that aligns our employees with the long-term success of the company and allows every member of our corporate team to own part of WHOOP and share in the company's long-term growth and success.
The U.S. base salary range for this full-time position is $150,000 - $190,000. Salary ranges are determined by role, level, and location. Within each range, individual pay is based on factors such as job-related skills, experience, performance, and relevant education or training. In addition to the base salary, the successful candidate will also receive benefits and a generous equity package.
These ranges may be modified in the future to reflect evolving market conditions and organizational needs. While most offers will typically fall toward the starting point of the range, total compensation will depend on the candidate's specific qualifications, expertise, and alignment with the role's requirements.
Learn more about WHOOP.
Auto-ApplySenior SAP Security Analyst
Security architect job in Augusta, ME
The base salary range for this position is dependent upon experience and location, ranging from $94,490 to $118,113
Under general direction, to support compliance with the Global Access Governance Rule, coordinating SAP security initiatives for providing security design, configuration, testing, and ad hoc/custom reporting capabilities in support of the business units. Serves as the primary contact with SAP developers, end users and process owners in specified business areas to understand ongoing security and functional requirements (changes, modifications, improvements) and ensuring overall SAP data security integrity; work with various departments in the development of information security standards and practices; make resourceful, practical decisions and address unexpected problems; and perform other security related duties as required.
Key Responsibilities
Design, implement, and support SAP security roles and profiles for all SAP environments, including ERP Central Component (ECC), Customer Relationship Management (CRM), Business Warehouse (BW), Governance Risk Compliance (GRC), SAP BusinessObjects BI (BOBJ), and Solution Manager.
Develops SAP security solutions and/or configuration changes to meet ongoing end user requirements. Implements configuration changes as required and prepares specifications for approved changes.
Design, implement, and support of GRC toolset, ruleset, policy governance, Segregation of Duties (SOD) controls, and all aspects of internal/external audits.
Review existing GRC toolset and rulesets, identifying improvement opportunities, and remediating identified violations.
Analyze non-technical security and functional requirements, translate requirements into technical security and functional specifications, and appropriately design and build secure technical solutions based on functional specifications.
Provides timely and accurate solutions to the functional business areas supporting SAP Security changes requested.
Assist business and technical teams with SAP functionality development focusing on access authorization.
Develops, maintains and updates documentation including instructions, reference materials, training materials.
Change Request and Transport review and approval.
Supports on-going end user training and other end user activities as required.
Assists in the development and support of Microsoft Office based tools
Required Qualifications
Education & Experience Required:
Associates Degree with a minimum of 7 years relevant experience required.
Minimum 5 years of progressive SAP Security experience.
Minimum 5 years of experience with GRC Compliance Tools, preferably INFOR Approva or SAP GRC.
Skills/Abilities:
Ability to communicate complex information, concepts or ideas in a confident and well-organized manner through verbal, written and/or visual means.
Ability to build effective relationships for key stakeholders locally and globally and to interact at all levels of the organization.
Ability to resolve complex problems and negotiate successful outcomes.
Ability to lead work processes and work independently.
Thorough knowledge and understanding of managing SAP Security within ECC, CRM, BW, and BOBJ systems
Demonstrated understanding of Segregation of Duties concepts and Sarbanes-Oxley framework.
Strong desire to build, improve and maintain a pristine SAP landscape.
Ability to communicate with business areas to ensure business needs are being addressed effectively.
Ability to travel occasionally, perform after-hours project- related work, and provide on-call support as needed.
Strong analytical, problem-solving and decision making skills.
Proficient in the use of Microsoft Office applications.
Preferred Qualifications
Bachelor's Degree with a minimum of 5 years relevant experience.
Competencies
Growth & Continuous Improvement
Initiative & Change
Focused on Results
Customer Centric (internal and/or external)
Communication
Collaboration
Leadership (people managers/leaders)
Benefits:
Award winning student loan debt repayment program
12% 401(k) Match
Competitive salary and performance-based bonuses
Comprehensive benefits - including medical, dental, vision and variety of well-being programs
Tuition Assistance
Opportunities for professional development, career advancement, and internal mobility
Supportive and inclusive work environment
Generous PTO policy
#LI-OFFICE
#LI-ER1
Company:
CENTRAL MAINE POWER CO
Mobility Information
Please note that any applicant who is not a citizen of the country of the vacancy will be subject to compliance with the applicable immigration requirements to legally work in that country.
At Avangrid we provide fair and equal employment and advancement opportunities for all employees and candidates regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, disability, protected veteran status or any other status protected by federal, state, or local law.
If you are an individual with a disability or a disabled veteran who is unable to use our online tool to search for or to apply for jobs, you may request a reasonable accommodation by contacting our People and Organization department at ********************.
Avangrid employees may be assigned a system emergency role and in the event of a system emergency, may be required to work outside of their regular schedule/job duties. This is applicable to employees that will work in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate functions. This does not include those that will work for Avangrid Power.
Avangrid employees may also be assigned a NERC Reliability Standards compliance role supporting Critical Infrastructure Protection (CIP) and/or Operations and Planning (O&P) responsibilities. This is applicable to employees that will work in electric transmission, operations, and cyber security business areas in Connecticut, Maine, Massachusetts, and New York within Avangrid Network and Corporate business areas. NERC Reliability Standards compliance roles and responsibilities may include additional access protections, training, audit engagement, and required evidence retention, and will be communicated by the employee's management.
Job Posting End Date:
December-20-2025
Auto-ApplyPrincipal Security Architect
Security architect job in Boston, MA
We are seeking an experienced and strategic Principal Security Architect to lead the design, implementation, and oversight of enterprise-class network and cloud security across our global infrastructure. This role blends deep technical expertise with strategic leadership and focuses on securing our on-premises data centers, public cloud platforms, and enterprise network edge using best-in-class tools like Palo Alto and Cisco.
This is a hands-on leadership role that influences global security architecture, mentors' engineers, and collaborates with cross-functional teams to protect our digital assets at scale.
Key Responsibilities
Security Architecture & Engineering
Lead the design and evolution of security controls across hybrid cloud and on-prem environments.
Architect and implement network segmentation, next-gen firewall policies, and zero-trust access models.
Define secure connectivity strategies across WAN, remote access, data centers, and cloud networks.
Technology Ownership
Serve as SME for Palo Alto Networks firewalls, Prisma Access, and Panorama.
Lead security configuration, lifecycle management, and policy enforcement on Cisco security platforms (ASA, ISE, Firepower, Umbrella).
Harden security for multi-cloud platforms (AWS, Azure, GCP) including IAM, VPCs, firewalls, and API security.
Operations & Response
Lead threat detection and response for network and infrastructure incidents.
Collaborate with SOC, GRC, and infrastructure teams to close security gaps and maintain compliance.
Continuously improve security monitoring, alerting, and forensics capabilities.
Security Automation & Tooling
Integrate security into CI/CD pipelines and infrastructure provisioning via Terraform, Ansible, or Python.
Automate security posture checks and drift detection in public cloud and data center environments.
Work with vulnerability management platforms and integrate findings into remediation workflows.
Governance, Risk & Compliance
Define security baselines and configuration standards for networking and infrastructure teams.
Ensure compliance with frameworks such as ISO 27001, NIST, CIS, and industry-specific requirements.
Participate in audits, risk assessments, and security reviews for new technologies and vendors.
Required Qualifications
10+ years of experience in infrastructure or network security, with 3+ years in a principal or lead role.
Deep expertise in Palo Alto Networks products and Cisco security platforms.
Strong understanding of cloud security architecture and native security tools in AWS, Azure, and/or GCP.
Experience securing on-premise and hybrid data centers, including virtualization and SDN technologies.
Proven experience designing and enforcing enterprise security policies across global networks.
Solid knowledge of routing/switching protocols (BGP, OSPF), VPNs, DNS security, and NAC.
Familiarity with SIEM, NDR, and EDR tools for detection and response.
Scripting/automation proficiency (Python, Bash, PowerShell, or IaC tools).
Preferred Qualifications
Certifications such as PCNSE, CISSP, CCNP Security, AWS/Azure Security Specialty.
Experience with identity federation (SAML, OAuth), secrets management, and PKI.
Background in segmentation frameworks (e.g., SCADA/ICS, OT security), or data loss prevention (DLP).
Experience in DevSecOps or cloud-native security tooling.
We are an equal-opportunity employer and do not discriminate because of race, color, religion, sex, national origin, ancestry, marital status, veteran status, age, disability, sexual orientation or gender identity or expression or any other legally protected category. InterSystems is an E-Verify Employer in the United States.
About InterSystems
InterSystems, a creative data technology provider, delivers a unified foundation for next-generation applications for healthcare, finance, manufacturing, and supply chain customers in more than 80 countries. Our data platforms solve interoperability, speed, and scalability problems for large organizations around the globe to unlock the power of data and allow people to perceive data in imaginative ways. Established in 1978, InterSystems is committed to excellence through its 24×7 support for customers and partners around the world. Privately held and headquartered in Boston, Massachusetts, InterSystems has 38 offices in 28 countries worldwide. For more information, please visit InterSystems.com.
Auto-ApplySecurity Architect
Security architect job in Stockholm, ME
Introduction Smartoptics provides innovative optical networking solutions for a new era of open networking. We focus on solving network challenges and increasing the competitiveness of our customers. Our customer base includes cable and telecom operators, cloud providers, Internet exchanges, governments and thousands of enterprises.
The candidate will be part of the R&D team. The R&D team develops complete systems including both hardware and software.
Position summary
To meet future security requirements for our next generation of optical networking products, we are looking for a senior Security Architect. You will be responsible for defining security architectures and guiding the product teams through the process of meeting and maintaining compliance with international standards. This includes setting requirements, driving architectural decisions, collaborating closely with both hardware and software teams, and interfacing with certification bodies.
This is a strategic and technical role where you will contribute to building secure, robust, and certifiable products that meet demanding customer and regulatory requirements. You will report to Head of System Engineering.
Requirements
* Based in the Stockholm area
* Office-first policy
* MSc or equivalent in Electrical Engineering, Computer Science, Information Security, or related field
* Proven experience with security architecture for embedded systems or network equipment
* In-depth knowledge of FIPS 140-3 and Common Criteria (ISO/IEC 15408) standards and certification processes
* Strong understanding of both hardware and software security concepts, such as secure boot, key management, cryptographic modules, and secure software development lifecycle
* Experience translating security requirements into concrete system design and documentation
* Excellent communication skills in English
* Interest and experience in creating and maintaining clear technical documentation
Desired skills
* Experience working with certification labs and evaluation bodies
* Background in the fiber optical industry, telecommunication, or data communication
* Hands-on knowledge of cryptographic hardware (e.g., TPMs, secure elements, HSMs) and related software stacks
Smartoptics R&D team is located in Kista with head office in Oslo, Norway. Benefits include pension, health insurance, bonus scheme, 6 weeks' vacation and flexible working hours. For more information about Smartoptics, please visit our about Smartoptics page.
Furthermore, note that you must have a Swedish/EU work permit. No relocation assistance or visa support provided. No recruiters or agencies, please.
About Smartoptics
Smartoptics is a Scandinavian company founded in 2006. We provide innovative optical networking solutions for the new era of open networking. Our focus is on solving network challenges and enhancing the competitiveness of our customers. Our clientele includes cable and telecom operators, cloud providers, Internet exchanges, governments, and thousands of enterprises.
At Smartoptics, we value inclusivity and prioritize the well-being of our employees. We foster a positive company culture and provide a supportive work environment.
Information System Security Officer
Security architect job in Woods Hole, MA
Woods Hole Oceanographic Institution is searching for a highly skilled and cleared Information System Security Officer (ISSO) / Classified Systems Information Assurance Analyst to join our team, focusing exclusively on the security of classified information systems and networks. This critical role is responsible for ensuring the confidentiality, integrity, and availability of sensitive government information in accordance with stringent U.S. government (USG) security directives.
The ISSO will be instrumental in the authorization and accreditation(A&A) process, continuous monitoring, incident response, and the implementation of robust security controls for classified environments. The ideal candidate will possess a deep understanding of relevant security frameworks, policies, and a proven track record of maintaining secure classified systems. This is a regular, full-time, exempt position, and is eligible for full benefits.
ESSENTIAL FUNCTIONS
Authorization & Accreditation (A&A) / Risk Management Framework (RMF):
Lead or support the development, review, and submission of comprehensive security authorization packages (e.g., System Security Plans (SSPs), Risk Assessment Reports, Contingency Plans, Plan of Action and Milestones (POA&Ms)) for classified systems.
Ensure all classified systems maintain an Authority to Operate (ATO), Interim Authority to Test (IATT), or Authority to Connect (ATC) in accordance with RMF or legacy A&A processes (e.g., DIACAP).
Interpret and apply USG security policies, regulations, and guidelines, including but not limited to: NISPOM, DoD Instruction 8500.01, NIST SP 800-53, DCID 6/3, ICD 503, JSIG, and DISA STIGs.
Security Control Implementation & Enforcement:
Design, implement, and maintain security controls specific to classified systems, including secure configurations, access controls, auditing, media control, and classified spillage prevention/response.
Configure and manage specialized security tools relevant to classified environments (e.g., Assured Compliance Assessment Solution (ACAS), Host Based Security System (HBSS), Data Loss Prevention (DLP) solutions).
Perform rigorous hardening of operating systems (Windows, Linux), applications, and network devices based on DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
Vulnerability Management & Continuous Monitoring:
Conduct vulnerability scans, analyze results, and work with system administrators to remediate security weaknesses on classified systems.
Oversee and perform continuous monitoring activities, including reviewing audit logs, security events, and system alerts for anomalous behavior.
Track and ensure compliance with Information Assurance Vulnerability Management (IAVM) directives.
Incident Response & Classified Spillage:
Act as a primary point of contact and lead for security incidents and classified spillage events on assigned systems.
Execute incident response procedures, including containment, eradication, recovery, and detailed reporting to relevant government authorities.
Participate in forensic investigations as required for classified incidents.
Compliance & Audit Support:
Maintain meticulous documentation of all security artifacts, configurations, policies, and procedures for classified systems.
Support internal and external security inspections, audits, and assessments by government agencies (e.g., DCSA, DSS, NSA).
Develop and implement standard operating procedures (SOPs) for the secure operation of classified systems.
User Training & Guidance:
Provide guidance and training to users on proper handling, marking, and safeguarding of classified information and operation of classified systems.
Ensure all personnel accessing classified systems meet training requirements (e.g., security awareness, insider threat).
Configuration Management:
Manage and control changes to the hardware, software, and firmware of classified systems to maintain their security posture and accreditation.
MINIMUM QUALIFICATIONS
Security Clearance:
Active U.S. Government Security Clearance required at the SECRET level or above.
Education:
Bachelor's degree in Computer Science, Information Security, Cybersecurity, or equivalent experience.
Experience:
5 years of dedicated experience in Information Assurance/Cybersecurity within classified government or defense environments.
Demonstrable expertise in the Risk Management Framework (RMF) or equivalent A&A processes (e.g., DIACAP).
Hands-on experience with security tools and technologies used in classified environments (e.g., ACAS, HBSS, SIEM, dedicated firewalls).
Proven experience with DISA STIGs and their application to various operating systems and applications.
Technical Skills:
Strong understanding of network protocols, operating systems (Windows, Linux/Unix), and virtualized environments in a classified context.
Experience with encryption technologies and COMSEC devices.
Knowledge of scripting languages (e.g., PowerShell, Python, Bash) for automation and auditing is a plus.
Desired Certifications:
CISSP (Certified Information Systems Security Professional)
DoD 8570.01-M IAT Level II (e.g., CompTIA Security+, CySA+, CCNA Security, SSCP) or higher (IAM Level I, II, or III).
GIAC Certifications relevant to incident handling, forensics, or security auditing (e.g., GCIH, GCFA, GCCC, GSNA)
Additional Job Requirements
Salary Range: $114,000 to $148,000 USD
The salary range provided for this position reflects the expected minimum and maximum base pay for new hires. Actual compensation will be determined based on factors such as relevant skills, experience, and qualifications, as well as internal equity and market conditions. In addition to base salary, eligible employees also receive a comprehensive benefits package.
WHOI accepts applications on a rolling basis - applications will be reviewed as they are received, and we encourage you to submit your application as soon as possible to ensure full consideration. While we will continue to review applications until the position is filled, and early applicants may have an advantage in the selection process.
EEO Statement
Woods Hole Oceanographic Institution (WHOI) provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Auto-ApplySenior Security Compliance Analyst
Security architect job in Boston, MA
Job Description
At OneStudyTeam (a Reify Health company), we specialize in speeding up clinical trials and increasing the chance of new therapies being approved with the ultimate goal of improving patient outcomes. Our cloud-based platform, StudyTeam, brings research site workflows online and enables sites, sponsors, and other key stakeholders to work together more effectively. StudyTeam is trusted by the largest global biopharmaceutical companies, used in over 6,000 research sites, and is available in over 100 countries. Join us in our mission to advance clinical research and improve patient care.
One mission. One team. That's OneStudyTeam.
We are seeking a Senior Security Compliance Analyst with expertise in Governance, Risk, and Compliance (GRC) to support and enhance our security and compliance programs within the healthcare industry. This role is critical in ensuring adherence to industry regulations, responding to customer audits, and maintaining compliance with ISO 27001, HIPAA, and other security frameworks.
The ideal candidate will be a detail-oriented compliance expert who can navigate complex regulatory environments, assist with internal/external audits, and drive continuous improvement in security governance. The ideal candidate must be able to operate independently while delivering on the following duties.
What You'll Be Working On:
Lead and support customer security audits, responding to security questionnaires and demonstrating compliance with security frameworks.
Prepare, coordinate, and manage ISO 27001 audits, including evidence collection, control implementation, and auditor engagement.
Ensure ongoing compliance with HIPAA, NIST CSF, and other regulatory requirements applicable to healthcare data security.
Develop and maintain policies, procedures, and security documentation to meet regulatory and contractual obligations.
Perform gap analyses and risk assessments to identify and remediate compliance risks.
Manage and improve security governance frameworks, ensuring alignment with industry best practices and business objectives.
Conduct third-party vendor risk assessments, ensuring compliance with security policies and contractual obligations.
Monitor security controls, ensuring effectiveness and continuous improvement in alignment with security frameworks.
Support security awareness training initiatives, ensuring employees understand compliance responsibilities.
Stay current on ISO 27001, HIPAA, NIST 800-53, and other relevant standards, translating them into actionable security controls.
Assist in defining security metrics and reporting on compliance status and risk posture to leadership.
Work closely with legal, security, IT, and business teams to align compliance requirements with security operations.
What You'll Bring to OneStudyTeam:
Bachelor's degree in Information Security, Computer Science, Risk Management, or related field (or equivalent experience).
8+ years of progressive experience in GRC, compliance, or security audit roles.
Experience in healthcare or regulated industries strongly preferred.
Certifications strongly preferred: ISO 27001 Lead Auditor/Implementer, CISSP, CISM, CISA, HITRUST CCSFP, CRISC.
Experience leading ISO 27001, SOC2, or HITRUST audits, including ISMS implementation and external audit coordination.
Strong understanding of NIST CSF, SOC 2, GDPR, and other security frameworks.
Hands-on experience with customer security audits, including responding to security questionnaires and managing security assessments.
Ability to perform risk assessments, policy reviews, and compliance gap analyses.
Strong written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders.
Detail-oriented with excellent organizational and project management skills.
Ability to work independently and collaboratively in a remote environment.
Familiarity with GRC tools (e.g., OneTrust, LogicGate, Archer, Vanta, Drata) is a plus.
We value diversity and believe the unique contributions each of us brings drives our success. We do not discriminate on the basis of race, sex, religion, color, national origin, gender identity, age, marital status, veteran status, or disability status.
Note: OneStudyTeam is unable to sponsor work visas at this time. If you are a non-U.S. resident applicant, please note that OneStudyTeam works with a Professional Employer Organization.
As a condition of employment, you will abide by all organizational security and privacy policies.
This organization participates in E-Verify (E-Verify's Right to Work guidance can be found here).
Senior Security Analyst
Security architect job in Boston, MA
We are seeking a detail-oriented and highly skilled Security Analyst to join our team in Boston and shape the future of Cybersecurity. As a Security Analyst at 7AI, you will leverage your expertise of the security landscape to review and analyze AI Agent investigations, ensuring accuracy and completeness, ultimately helping to build our multi-agent platform. You will be integral in building and maintaining the reliability of our AI Agents, working in tandem with Engineering and Product to inform our roadmap as we build. If you want to build the next generation of Cybersecurity and put AI in the hands of defenders, please apply below.
Key Responsibilities:
Review and validate alerts and investigations completed by the AI Agents for accuracy and completeness.
Collaborate with the Engineering and Product teams to provide feedback and assist in optimizing the AI platform.
Develop internal playbooks, standard operating procedures and tools that will guide the AI Agents to perform quality investigations.
Stay current with emerging cybersecurity trends, vulnerabilities, and new attack techniques, especially the field of AI-driven attacks.
Investigate flagged security incidents, analyzing potential threats and confirming the findings generated by AI.
Recommend mitigation strategies and remediation steps to train the AI to reduce the threat surface.
Correlate findings from multiple sources, including network logs, endpoint data, and threat intelligence, to validate AI-generated reports.
Assist with ongoing threat monitoring, triage, and prioritization of security incidents.
Required Qualifications:
4+ years of experience in a Security Analyst or similar role within the cybersecurity field.
Hands-on experience with incident response for Cloud and Identity alerts, and at least two of Email, EDR, Threat Intel and Networking alerts.
Strong understanding of security monitoring tools and techniques (SIEM, IDS/IPS, IDP, etc.).
Experience analyzing and investigating security alerts from multiple sources, including intrusion detection systems, network monitoring tools, and endpoint protection platforms.
Familiarity with the latest cybersecurity threats, attack vectors, and vulnerabilities.
Strong analytical and problem-solving skills, with the ability to verify AI-driven analysis and make independent security decisions.
Scripting experience with languages such as Python
Data querying experience with SIEM technologies (SPL, KQL, FQL, SQL, etc).
Auto-ApplySenior Analyst, Security (Onsite)
Security architect job in Westford, MA
Country:
United States of America Onsite
U.S. Citizen, U.S. Person, or Immigration Status Requirements:
Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Security Clearance:
DoD Clearance: Secret
At RTX, the foundation of everything we do is rooted in our values and a higher calling - to help our nation and allies defend freedoms and deter aggression. We bring the strength of more than 100 years of experience and renowned engineering expertise to meet the needs of today's mission and stay ahead of tomorrow's threat. Our team solves tough, meaningful problems that create a safer, more secure world.
The Senior Analyst, Security will help develop, administer and maintain the program's security policies and procedures in a fast-paced, deadline driven environment to ensure compliance with the 32 CFR Part 117 National Industrial Security Program Operating Manual (NISPOM), Department of Defense Manual (DoDM) 5205.07 series, Intelligence Community Directive (ICD) 705.
**
This position is onsite in Westford, MA **
What YOU will do:
Administering the security procedures (NISPOM, DoDM 5205.07 series, and Intelligence Community Directive (ICD) 705), as they relate to operating in a classified environment for: personnel processing, media control, marking and control of documents / materials, security education, visitor control, destruction of classified,
Request, review and submit investigative Standard From (SF) for background investigations.
Submit and track foreign travel through DISS.
Implement local Standard Operating Procedures (SOP), Operations Security (OPSEC) Plans, and proprietary test plans utilizing risk management principles.
Assist in the security oversight and management to subcontractors and subordinate business units via the DD Form 254 or other contractual methods.
Support the establishment, accreditation, and maintenance of a secure facility in accordance with (IAW) ICD 705.
Establish and oversee specialized procedures for the transmission of classified and/or proprietary material/information.
Conduct and/or participate in internal reviews and/or Government inspections.
Investigate security infractions/violations and prepare reports specifying the potential for loss or compromise and the associated risk to the program(s).
Collaborate and assist the FSO on implementation of Security requirements.
This position may require travel.
Qualifications You Must Have:
Typically requires a University Degree and minimum 2 years of prior relevant experience or an Advanced Degree in a related Experience with any of the following: NISPOM, DoDM 5205.07 series, and/or ICD 705.
Active and transferable U.S. government issued TOP SECRET security clearance is required prior to start date.
U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.
Qualifications We Prefer
Previous experience as a security professional supporting SAP and/or SCI programs.
Degree major in Business Management, Security and/or Risk Management, Government Policy, Information Management, Criminal Justice, or other related fields of study.
At least 5 years of National Security experience is preferred.
What We Offer:
Some of our competitive benefits packages include:
Medical, dental, and vision insurance.
Three weeks of vacation for newly hired employees.
Generous 401(k) plan that includes employer matching funds and separate. employer retirement contribution, including a Lifetime Income Strategy option.
Tuition reimbursement program.
Student Loan Repayment Program.
Life insurance and disability coverage.
Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection.
Birth, adoption, parental leave benefits.
Ovia Health, fertility, and family planning.
Adoption Assistance.
Autism Benefit.
Employee Assistance Plan, including up to 10 free counseling sessions.
Healthy You Incentives, wellness rewards program.
Doctor on Demand, virtual doctor visits.
Bright Horizons, child, and elder care services.
Teladoc Medical Experts, second opinion program.
And more!
Learn More & Apply Now!
Do you want to be part of a new, exciting initiative to combine foundational IT with new digital technologies? Our Digital Technology team is driving business efficiencies and a better customer experience by connecting technologies, people, information and processes. From making aircraft more electric, intelligent and integrated to building new software platforms such as Internet of Things, big data, artificial intelligence, and blockchain, there's no better place to be right now than in digital. If you're an agile thinker who enjoys utilizing modern technology to make big improvements, then you're a perfect fit for this team. Join Collins Aerospace to help us revolutionize the aerospace industry today!
WE ARE REDEFINING AEROSPACE.
* Please consider the following role type definitions as you apply for this role.
Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance employees, as they are essential to the development of our products.
Regardless of your role type, collaboration and innovation are critical to our business and all employees will have access to digital tools so they can work with colleagues around the world - and access to Collins sites when their work requires in-person meetings.
At Collins, the paths we pave together lead to limitless possibilities. And the bonds we form - with our customers and with each other -- propel us all higher, again and again.
Apply now and be part of the team that's redefining aerospace, every day.
The salary range for this role is 66,000 USD - 130,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act.
Privacy Policy and Terms:
Click on this link to read the Policy and Terms
Auto-ApplyPhysical Security Systems Engineer
Security architect job in Wilmington, MA
Join Allied Universal Technology Services, a global leader in transforming the security industry. We integrate advanced technology - video surveillance, electronic access control, alarm monitoring and augmented solutions with physical security to help people feel safe. Whether you're an installation technician, service technician, engineer, or project manager, you'll discover rewarding opportunities to grow your career as part of a valued team.
Apply today and be phenomenal-build a meaningful career while protecting what matters most through innovative security technology.
Job Description
Allied Universal is looking to hire a Solution Engineer. The Solution Engineer creates all post-sale security systems design, engineering, value engineering, and documentation. The position is part of the Solutions Engineering department, which is responsible for translating, expanding, finalizing, and documenting pre-sales proposals and technical designs produced by Sales and Solutions Architecture in pre-sale systems architecting and quoting. This position works closely with Sales, Solutions Architecture, Operations, and external customers as required.
The primary work products for the Solution Engineer are security system and construction technical drawings, including custom installation drawings and instructions, network design diagrams, riser diagrams, typical installation diagrams, point-to-point system schedules, door hardware schedules, document redlining, functional narratives describing systems operations, and as-built documentation.
RESPONSIBILITIES:
Creates and updates comprehensive post-sale engineering packages illustrating device locations, IDF/MDF room layouts, SOC/GSOC layouts, console designs, installation diagrams, riser diagrams, network designs, etc.
Creates and updates performance-based and product-based specifications
Creates and updates pre-fabrication submittal packages as specified by architects and engineers for their approval prior to installation
Develops and maintains as-built record documentation over the life cycle of various projects and follow-on MAC work
Utilizes and contributes to a comprehensive library of standard post-sale engineering documents, templates, and standards, as well as project-specific and customer-specific submittals
Ensures effective value engineering by assuring technical compliance while at the same time reducing Allied Universal Technology Services costs whenever possible
Reviews AUTS proposals both pre-sale and post-sale to scrutinize selected products for applicability and specification compliance
Collaborates with AUTS's product suppliers to ensure the desired functionality of selected products.
Consistently applies AUTS's standards for installation
Contributes to AUTS internal guidelines for Solutions Engineering engagement and post-sale systems engineering
QUALIFICATIONS (MUST HAVES):
A minimum of five (5) years of experience in electronic security systems design / engineering
In-depth knowledge of security system design best practices and product applicability, including products like:
Video surveillance and related technologies (Analog, IP, Codecs, VMS)
Access control and related technologies (card access, biometrics, PIV, FIPS-201, HSPD-12, various processor panels, electric locking hardware, etc.)
Physical intrusion detection (Bosch, DMP, etc.)
Software House, Lenel, Amag, Brivo, Genetec, and Avigilon systems architectures
Computer software skills to include: AutoCAD and associated rendering applications, MS Office, Acrobat Writer, and Visio
Ability to read and understand complex architectural and engineering drawings
Working knowledge of AC and DC circuitry, voltage drop calculations, and wire sizing
Ability to collaborate with diverse teams of technical designers and engineers
Ability to simultaneously work on multiple large, complex projects
Good written and verbal communication skills
Strong analytical decision-making capabilities
Self-motivated with the ability to influence others
PREFERRED QUALIFICATION (NICE TO HAVES):
Manufacture certifications
PMP/PSP certifications
A bachelor's or associate's degree in electrical engineering or equivalent is considered a plus
Ability to plan, size, and design enterprise-class IT network and storage solutions, including products like:
Virtualization technologies such as VMware vSphere and View
Data-center networking technologies such as Cisco Nexus
Storage Area Network technologies such as NetApp or EMC
Load balancing / firewalling technologies such as Cisco ACE or Cisco ASA
Data-center protocols such as Fibre Channel, NFS, IP, iSCSI, DCE
Physical Security Information Management (PSIM)
BENEFITS:
Salary: $80,000 - 115,000 / annually
Medical, dental, vision, basic life, AD&D, and disability insurance
Enrollment in our company's 401 (k) or Supplemental Income Plan, subject to eligibility requirements
Eight paid holidays annually, five sick days, and four personal days
Vacation time offered at an accrual rate of 3.08 hours biweekly. Unused vacation is only paid out where required by law.
#LI-EL1
Closing
Allied Universal is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race/ethnicity, age, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, disability, protected veteran status or relationship/association with a protected veteran, or any other basis or characteristic protected by law. For more information: ***********
If you have difficulty using the online system and require an alternate method to apply or require an accommodation, please contact our local Human Resources department. To find an office near you, please visit: ***********/offices.
Requisition ID 2025-1495451
Auto-ApplyPhysical Security Systems Engineer
Security architect job in Wilmington, MA
Overview
Join Allied Universal Technology Services, a global leader in transforming the security industry. We integrate advanced technology - video surveillance, electronic access control, alarm monitoring and augmented solutions with physical security to help people feel safe. Whether you're an installation technician, service technician, engineer, or project manager, you'll discover rewarding opportunities to grow your career as part of a valued team.
Apply today and be phenomenal-build a meaningful career while protecting what matters most through innovative security technology.
Job Description
Allied Universal is looking to hire a Solution Engineer. The Solution Engineer creates all post-sale security systems design, engineering, value engineering, and documentation. The position is part of the Solutions Engineering department, which is responsible for translating, expanding, finalizing, and documenting pre-sales proposals and technical designs produced by Sales and Solutions Architecture in pre-sale systems architecting and quoting. This position works closely with Sales, Solutions Architecture, Operations, and external customers as required.
The primary work products for the Solution Engineer are security system and construction technical drawings, including custom installation drawings and instructions, network design diagrams, riser diagrams, typical installation diagrams, point-to-point system schedules, door hardware schedules, document redlining, functional narratives describing systems operations, and as-built documentation.
RESPONSIBILITIES:
Creates and updates comprehensive post-sale engineering packages illustrating device locations, IDF/MDF room layouts, SOC/GSOC layouts, console designs, installation diagrams, riser diagrams, network designs, etc.
Creates and updates performance-based and product-based specifications
Creates and updates pre-fabrication submittal packages as specified by architects and engineers for their approval prior to installation
Develops and maintains as-built record documentation over the life cycle of various projects and follow-on MAC work
Utilizes and contributes to a comprehensive library of standard post-sale engineering documents, templates, and standards, as well as project-specific and customer-specific submittals
Ensures effective value engineering by assuring technical compliance while at the same time reducing Allied Universal Technology Services costs whenever possible
Reviews AUTS proposals both pre-sale and post-sale to scrutinize selected products for applicability and specification compliance
Collaborates with AUTS's product suppliers to ensure the desired functionality of selected products.
Consistently applies AUTS's standards for installation
Contributes to AUTS internal guidelines for Solutions Engineering engagement and post-sale systems engineering
QUALIFICATIONS (MUST HAVES):
A minimum of five (5) years of experience in electronic security systems design / engineering
In-depth knowledge of security system design best practices and product applicability, including products like:
Video surveillance and related technologies (Analog, IP, Codecs, VMS)
Access control and related technologies (card access, biometrics, PIV, FIPS-201, HSPD-12, various processor panels, electric locking hardware, etc.)
Physical intrusion detection (Bosch, DMP, etc.)
Software House, Lenel, Amag, Brivo, Genetec, and Avigilon systems architectures
Computer software skills to include: AutoCAD and associated rendering applications, MS Office, Acrobat Writer, and Visio
Ability to read and understand complex architectural and engineering drawings
Working knowledge of AC and DC circuitry, voltage drop calculations, and wire sizing
Ability to collaborate with diverse teams of technical designers and engineers
Ability to simultaneously work on multiple large, complex projects
Good written and verbal communication skills
Strong analytical decision-making capabilities
Self-motivated with the ability to influence others
PREFERRED QUALIFICATION (NICE TO HAVES):
Manufacture certifications
PMP/PSP certifications
A bachelor's or associate's degree in electrical engineering or equivalent is considered a plus
Ability to plan, size, and design enterprise-class IT network and storage solutions, including products like:
Virtualization technologies such as VMware vSphere and View
Data-center networking technologies such as Cisco Nexus
Storage Area Network technologies such as NetApp or EMC
Load balancing / firewalling technologies such as Cisco ACE or Cisco ASA
Data-center protocols such as Fibre Channel, NFS, IP, iSCSI, DCE
Physical Security Information Management (PSIM)
BENEFITS:
Salary: $80,000 - 115,000 / annually
Medical, dental, vision, basic life, AD&D, and disability insurance
Enrollment in our company's 401 (k) or Supplemental Income Plan, subject to eligibility requirements
Eight paid holidays annually, five sick days, and four personal days
Vacation time offered at an accrual rate of 3.08 hours biweekly. Unused vacation is only paid out where required by law.
#LI-EL1
Closing
Allied Universal is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race/ethnicity, age, color, religion, sex, sexual orientation, gender identity, national origin, genetic information, disability, protected veteran status or relationship/association with a protected veteran, or any other basis or characteristic protected by law. For more information: ***********
If you have difficulty using the online system and require an alternate method to apply or require an accommodation, please contact our local Human Resources department. To find an office near you, please visit: ***********/offices.
Requisition ID
2025-1495451
Manager, Information Security
Security architect job in Boston, MA
New England College of Optometry seeks an entry level Information Security Manager to develop, implement, and oversee a robust information security strategy and program. This critical role involves establishing and enforcing policies, procedures, and technologies to protect the confidentiality, integrity, and availability of institutional and student data. The Information Security Manager will be responsible for risk assessment, incident response, security operations, and ensuring compliance with all relevant regulations and standards. This role requires strong leadership, technical expertise, and excellent communication skills to collaborate effectively across the institution.
Responsibilities
* Develop, implement, and oversee a robust information security strategy and program in alignment with institutional goals and industry best practices.
* Establish and maintain institutional information security policies, standards, and guidelines, ensuring they are regularly reviewed, updated, and communicated.
* Manage security operations, including monitoring, detection, prevention, response, and analysis of security threats and vulnerabilities.
* Lead and coordinate the information security incident response team, managing security breaches & ensuring timely and effective resolution and post-incident analysis.
* Conduct regular risk assessments and penetration testing to identify and mitigate potential security vulnerabilities across systems, networks, and applications.
* Ensure compliance with national and international regulatory frameworks (e.g., FERPA, HIPAA, ISO 27001, SOC 2) relevant to the organization.
* Oversee security awareness training programs for all employees to promote a culture of security consciousness.
* Manage the security budget and evaluate, select, and implement appropriate security tools and technologies.
* Report on the status of the security program, vulnerabilities, and incidents to executive leadership.
* Work on "special projects" as assigned by the Chief Information Officer.
* Other duties as assigned.
Requirements
* Experience in designing, implementing, and managing enterprise-level information security programs and strategy.
* Technical knowledge of network security, application security, cloud security (e.g., AWS, Azure, GCP), and endpoint protection technologies.
* Understanding of risk management methodologies and security frameworks (e.g., ISO 27001, NIST, CIS Controls).
* Experience leading security incident response and forensic analysis.
* Strong communication and interpersonal skills, with the ability to explain complex security issues to technical and non-technical audiences.
* Knowledge of networking principles, including wireless networking.
* Excellent written and verbal communication skills, professional appearance, punctuality and a sense of urgency.
* Experience working with Active Directory and Google Cloud Platform.
* Ability and willingness to learn new technologies.
Preferred Background/Skills
* Professional certifications such as CISSP, CISM, or relevant SANS certifications.
* Experience with Governance, Risk, and Compliance (GRC) tools and processes.
* Exceptional organizational skills, with the ability to prioritize projects and tasks.
* Familiarity with scripting languages (e.g., Python, PowerShell) for security automation.
* Ability to write reports and document steps for knowledge sharing.
* Ability to work efficiently and independently with minimal supervision.
* Excellent customer service and communications skills.
Education
* Bachelor's degree in Computer Science, Information Technology, Information Security, or a related technical field.
Experience
* A minimum of 2 years of progressive experience in the field of information security.
NECO is an Equal Opportunity employer and encourages all qualified candidates to apply.
New England College of Optometry offers a robust benefits program including:
* 3 plan options for BCBS medical coverage (employer subsidized at 75% or greater)
* Mental Health and Wellness benefits
* BCBS Dental
* Discounted vision services
* 13 paid holidays and generous paid time off for sick, vacation, and personal days
* Employer-paid life insurance, and short-term and long-term disability
* Voluntary Insurance: life, critical illness, hospital indemnity, accident,
* Voluntary Benefits: employee discounts and pet insurance
* 9% employer contribution to a 403(b) retirement plan after 1 year of service with no vesting schedule or match requirement
* Qualified Public Service Loan Forgiveness Employer
Manager, Information Security
Security architect job in Boston, MA
Full-time Description
New England College of Optometry seeks an entry level Information Security Manager to develop, implement, and oversee a robust information security strategy and program. This critical role involves establishing and enforcing policies, procedures, and technologies to protect the confidentiality, integrity, and availability of institutional and student data. The Information Security Manager will be responsible for risk assessment, incident response, security operations, and ensuring compliance with all relevant regulations and standards. This role requires strong leadership, technical expertise, and excellent communication skills to collaborate effectively across the institution.
Responsibilities
Develop, implement, and oversee a robust information security strategy and program in alignment with institutional goals and industry best practices.
Establish and maintain institutional information security policies, standards, and guidelines, ensuring they are regularly reviewed, updated, and communicated.
Manage security operations, including monitoring, detection, prevention, response, and analysis of security threats and vulnerabilities.
Lead and coordinate the information security incident response team, managing security breaches & ensuring timely and effective resolution and post-incident analysis.
Conduct regular risk assessments and penetration testing to identify and mitigate potential security vulnerabilities across systems, networks, and applications.
Ensure compliance with national and international regulatory frameworks (e.g., FERPA, HIPAA, ISO 27001, SOC 2) relevant to the organization.
Oversee security awareness training programs for all employees to promote a culture of security consciousness.
Manage the security budget and evaluate, select, and implement appropriate security tools and technologies.
Report on the status of the security program, vulnerabilities, and incidents to executive leadership.
Work on "special projects" as assigned by the Chief Information Officer.
Other duties as assigned.
Requirements
Experience in designing, implementing, and managing enterprise-level information security programs and strategy.
Technical knowledge of network security, application security, cloud security (e.g., AWS, Azure, GCP), and endpoint protection technologies.
Understanding of risk management methodologies and security frameworks (e.g., ISO 27001, NIST, CIS Controls).
Experience leading security incident response and forensic analysis.
Strong communication and interpersonal skills, with the ability to explain complex security issues to technical and non-technical audiences.
Knowledge of networking principles, including wireless networking.
Excellent written and verbal communication skills, professional appearance, punctuality and a sense of urgency.
Experience working with Active Directory and Google Cloud Platform.
Ability and willingness to learn new technologies.
Preferred Background/Skills
Professional certifications such as CISSP, CISM, or relevant SANS certifications.
Experience with Governance, Risk, and Compliance (GRC) tools and processes.
Exceptional organizational skills, with the ability to prioritize projects and tasks.
Familiarity with scripting languages (e.g., Python, PowerShell) for security automation.
Ability to write reports and document steps for knowledge sharing.
Ability to work efficiently and independently with minimal supervision.
Excellent customer service and communications skills.
Education
Bachelor's degree in Computer Science, Information Technology, Information Security, or a related technical field.
Experience
A minimum of 2 years of progressive experience in the field of information security.
NECO is an Equal Opportunity employer and encourages all qualified candidates to apply.
New England College of Optometry offers a robust benefits program including:
3 plan options for BCBS medical coverage (employer subsidized at 75% or greater)
Mental Health and Wellness benefits
BCBS Dental
Discounted vision services
13 paid holidays and generous paid time off for sick, vacation, and personal days
Employer-paid life insurance, and short-term and long-term disability
Voluntary Insurance: life, critical illness, hospital indemnity, accident,
Voluntary Benefits: employee discounts and pet insurance
9% employer contribution to a 403(b) retirement plan after 1 year of service with no vesting schedule or match requirement
Qualified Public Service Loan Forgiveness Employer
Facility Security Officer & Information Systems Security Officer (Onsite)
Security architect job in North Berwick, ME
Country: United States of America Onsite U.S. Citizen, U.S. Person, or Immigration Status Requirements: Active and transferable U.S. government issued security clearance is required prior to start date. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance
Security Clearance:
DoD Clearance: Secret
Pratt & Whitney is working to once again transform the future of flight-designing, building and servicing engines unlike any the world has ever seen. And because transformation begins from within, we're seeking the people to drive it. So, calling all curious.
Come ready to explore and you'll find a place where your talent takes flight-beyond the borders of title, a country or your comfort zone. Bring your passion and commitment and we'll welcome you into a tight-knit team that takes our mission personally. Channel your drive to make a difference into shaping an organization and an industry that's evolving fast to the future.
At Pratt & Whitney, the difference you make is on display every day. Just look up. Are you ready to go beyond?
What You Will Do:
Support Pratt & Whitney's Government Security Compliance team as the Facility Security Officer (FSO) / Information Systems Security Officer (ISSO) for the North Berwick, ME facility. This critical leadership role ensures compliance with the National Industrial Security Program (NISP), NISP Operating Manual (NISPOM), Defense Counterintelligence and Security Agency (DCSA) standards, and other applicable government regulations. The FSO/ISSO will oversee security operations for a cleared facility, ensuring the protection of classified information, systems, and personnel while fostering a culture of security excellence.
Key Responsibilities:
The FSO/ISSO will report directly to the Pratt & Whitney Associate Director, Corporate Facility Security Officer, and will be responsible for the following:
* Leadership and Compliance:
* Lead the formulation, establishment, and execution of local collateral security policies, procedures, and protocols to ensure compliance with NISP, DAAPM, ICDs, and other governing regulations.
* Serve as the primary interface with internal and external stakeholders, including government agencies, subcontractors, and P&W leadership.
* Security Program Oversight:
* Manage the facility's classified holdings, maintain CAGE code facility clearance, and process changes in conditions.
* Conduct and oversee security program reviews, including DCSA inspections, self-inspections, and formal audits.
* Investigate and report security incidents/violations in collaboration with the Corporate FSO and Cognizant Security Authority.
* Insider Threat Program:
* Serve as a key member of the Insider Threat Management Council and liaise with the Corporate Insider Threat Program Senior Official (ITPSO).
* Provide North Berwick leadership and guidance on Insider Threat Program activities and initiatives.
* Information Systems Security:
* Collaborate with the Information Systems Security Manager (ISSM) to ensure the operational security posture of information systems.
* Manage user account requests, monitor user activity, and analyze audit records to identify and address anomalies.
* Support incident response activities in the event of security violations or breaches.
* Stakeholder Engagement:
* Foster effective communication and collaboration with government customers, associated contractors, subcontractors, P&W teams, and North Berwick senior leadership.
* Represent the GSC team as a project manager on select core projects and initiatives.
* Training and Development:
* Attend technical and security training to maintain expertise in security management, operating systems, and networking.
* Provide guidance and training to facility staff on security responsibilities and best practices.
* Serve as the Government Security Compliance Data Transfer Agent program focal:
* Provide leadership and oversight for the Data Transfer Agent (DTA) program, ensuring compliance with regulatory and customer requirements.
* Serve as the primary point of contact for customers regarding DTA program compliance and functionality.
* Collaborate with internal stakeholders to maintain and enhance program effectiveness and security.
* Develop and implement best practices, policies, and procedures for secure and efficient data transfer.
* Monitor program performance and drive continuous improvement to meet evolving security and customer needs.
* Other Duties:
* Perform additional tasks as directed by the Corporate Facility Security Officer.
* Coordinate and support the North Berwick Security Staff as directed.
Qualifications You Must Have:
* Advanced degree and 5+ years of experience in industrial security, cybersecurity, government compliance, or government regulated industry; OR Bachelor's degree and 8+ years of relevant industry experience; OR an Associate's degree and 10+ years of relevant industry experience. We will also consider high school diploma, technical or military training, or recognized industry certifications in combination with 12+ years or relevant industry experience.
* 1+ Year of hands-on experience supporting administering and/or maintaining computing systems, networks and/or software
* Active U.S. government issued Secret level security clearance required plus ability to obtain and maintain a Top-Secret level security clearance. U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.
* Must be able to obtain industry recognized Cybersecurity certification within 12 months of hire (i.e. Security + CE)
Qualifications You Prefer:
* Strong understanding of the NISPOM, DAAPM, ICDs, and other security regulations.
* Experience with DISS, NISS, SIMS, and other DCSA related databases.
* Proficiency in managing classified information systems and working with DCSA inspections.
* Cybersecurity certification (i.e. Security + CE).
* Facility Security Officer (FSO) certification.
* Information Systems Security Officer (ISSO) certification.
* Proven leadership experience, preferably within a defense, aerospace, or government environment.
* Experience with Insider Threat Programs and related compliance activities.
* Strong project management skills and the ability to manage multiple priorities effectively.
What is my Role Type?
In addition to transforming the future of flight, we are also transforming how and where we work. We've introduced role types to help you understand how you will operate in our blended work environment. This role is:
* Onsite: Employees who are working in Onsite roles will work primarily onsite. This includes all production and maintenance workers, as they are essential to the development of our engines.
Candidates will learn more about role type and current site status throughout the recruiting process. For onsite and hybrid roles, commuting to and from the assigned site is the employee's personal responsibility.
Learn more & apply today!
As part of our commitment to maintaining a secure hiring process, candidates may be asked to attend select steps of the interview process in-person at one of our office locations, regardless of whether the role is designated as on-site, hybrid or remote.
The salary range for this role is 101,000 USD - 203,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate's work experience, location, education/training, and key skills.
Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.
Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company's performance.
This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.
RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.
RTX is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or veteran status, or any other applicable state or federal protected class. RTX provides affirmative action in employment for qualified Individuals with a Disability and Protected Veterans in compliance with Section 503 of the Rehabilitation Act and the Vietnam Era Veterans' Readjustment Assistance Act.
Privacy Policy and Terms:
Click on this link to read the Policy and Terms
Auto-Apply