We are seeking a highly skilled Security Architect to join our team. This role will be instrumental in driving innovation and ensuring the highest level of security for our Infrastructure and software applications. This role will report in to the Cyber Security Organization. This is an excellent opportunity for an experienced Security Architect to join our Growing Cyber Security team. The role will represent the Cyber Security function within RRD and will champion best practices to both Cybersecurity and its business partners.
The candidate should have 8 to 15 years of experience in design and implement robust security solutions across cloud, infrastructure, applications, databases, AI, and endpoint security. The ideal candidate will have a deep understanding of security frameworks, software security principles, risk assessment methodologies with a proven track record in architecting secure systems, and a passion for staying ahead of emerging threats, ensuring that our systems remain secure and resilient against cyber threats.
Responsibilities
- Security Architecture & Design: Develop and implement secure architecture frameworks across cloud, infrastructure, application, and database environments in alignment with NIST, ISO 27001, SOC 2, and PCI DSS.
- Cloud Security: Design and implement cloud security best practices for AWS, Azure, GCP to ensure compliance with security standards (CIS, NIST, ISO 27001, PCI DSS, etc.).
- Infrastructure Security: Evaluate and enhance network security, data center security, and endpoint security controls to prevent unauthorized access and threats.
- Application Security: Work closely with development teams to integrate secure SDLC, threat modeling, and secure coding practices into software development workflows.
- Database Security: Implement database security policies, including encryption, access control, auditing, and monitoring mechanisms.
- AI Security: Assess security risks in AI/ML models, ensuring adversarial resilience and data privacy compliance.
- Evaluate security risks and recommend mitigation strategies for handling sensitive data, including PII, PHI, and PCI
- Collaboration & Leadership: Work closely with IT, DevOps, and Security teams to embed security into enterprise architecture and software development lifecycles.
…