Security Architect (Enterprise Architecture)

Reporting to: Head Architect Data & Security EA

Department name: Enterprise Architecture

Location: Bucharest, Ro / Cluj, Ro

Who We Are – MassMutual Romania

MassMutual Romania – in partnership with MassMutual in the United States – will help shape a culture of innovation and to create the digital products and technology solutions that help people secure their future and protect the ones they love.

Positioning MassMutual for its next 20 million customers and remaining innovative in a digital-first world led to the creation of MassMutual Romania in 2020. With offices in Bucharest and Cluj, MassMutual Romania was established to build an in-house team with expertise in application development and support, quality assurance and data science.

For 170 years, MassMutual has put its customers at the heart of what it does by providing holistic financial solutions, guidance, and education on their terms. Its long-term strategy helps ensure that policyowners and their loved ones can rely on them to be there when they need them most.

If this vision excites you, we are seeking a Security Architect to become a MassMutual Romania team member. This is a great opportunity to be a part of the transformational journey at MassMutual Romania. As we continue to grow our business and look for new ways to engage with customers, technology will be one of the most important enablers to our success and you can be a part of it.

The Opportunity

Do you want to be part of a team that encourages your growth, supports your ambitions and makes it a priority for you to reach your goals? Is helping people part of who you are? At MassMutual Romania, we help millions of people find financial freedom, offer financial protection and plan for the future. We do this by building trust with our customers by being knowledgeable problem solvers and prioritize their needs above all else. We Live Mutual.

If this sounds like a fit, we’re looking to hire a Security Architect to join our team.

Job Description

As a Security Architect, you will be part of MassMutual’s team whose vision is to build an industry leading Enterprise Architecture (EA) function that creates alignment between technology and business strategy. Furthermore, you will have an opportunity to guide the process of planning and designing capabilities to maximize the value of Cyber Security and enable the company to make high impact, long-term decisions.

This will be accomplished through architecture strategies, blueprints and roadmaps that standardize technology stacks and create engineering speed and agility through the innovative use of data science, data analytics, cloud, and API’s.

Responsibilities

• Build Enterprise Security Architecture strategy and roadmaps.
• Build Security Reference Architectures, Standards and Guidance.
• Build Security Architecture and Integration Patterns.
• Support Security platform architecture design.
• Consult on security capabilities for business and technology platforms.
• Evaluate and lead security architectures deliverables, perform capability assessments, and support technical evaluations for closing gaps.
• Engage in SA problem solving, snapshots and full architecture documents.
• Actively publish deliverables and utilizes multi-media to educate and engage with federated solution architecture community members.
• Update Specification and publication of standards around APIs, DevSecOps, IAM, data security, cloud services, and software security.
• Partner with business executives and senior architects to identify security risks and process issues, then provides enterprise patterns to resolve the issues.
• Provide recommendations on system options, risks, cost/benefit analysis, and impact on cross-domain systems, business strategy, goals, and processes.
• Partner with extended enterprise architecture, enterprise cyber security, compliance, business, and IT support teams to communicate and collaborate on architecture strategies, standards, and guidance.
• Review existing security architecture, identify design gaps, and recommend security enhancements.
• Stay abreast of current and emerging security threats and design security architecture to mitigate them.
• Stay abreast of emerging security technologies and integrate them into security architecture as needed.
• Ensure alignment between security architecture frameworks and standards and overall business strategy.
• Achieve security architecture compliance on requirements, including, but not limited to, Sarbanes-Oxley, payment card industry standards, HIPAA/HITECH, global data privacy requirements and state and federal regulations.

Requirements

• Bachelor’s degree in computer science, Engineering, or a related field
• 5+ years’ experience working with security technologies and standards (Cloud Security, Containers, IAM, WebAuthn, BigData, Key Management, Encryption, Security Data Management)
• 8+ years performing security system design, IT operations, research, and benchmarking
• 3-5 years of experience working AWS, Azure, and Kubernetes
• Object oriented, Scripting and functional programming knowledge
• Extensive experience of providing architectural direction to project development teams or equivalent combination of education and work experience
• Exceptional written and verbal communication abilities
• Track record of designing architectural reference material
• Extensive experience of providing architectural direction to technical team
• Expert level certifications in security (CISSP, CCSP, ISSAP, TOGAF, AWS/Azure Certified)
• Excellent communication, presentation, influencing and reasoning skills
• Demonstrated technical expertise in existing security and IT systems, and an ability to keep pace with changing security and IT technologies
• Strong interpersonal skills, with an emphasis on the ability to effectively influence others, collaborate and partner.
• A team-focused mentality with the proven ability to work effectively with diverse stakeholders.

Nice to have

• 5 years of related IT Security Architecture and solution architecture experience preferred
• Experience using Architecture Methodology (TOGAF, Archimate)
• An understanding of the impact of emerging business and end-user technologies on information security requirements and architecture
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate one.

#LI_MG1