Apply on Employer Site

DataHouse · 3 months ago

Cyber Security Architect

Honolulu, HI

Full-time

Onsite

Senior Level

6+ years exp

DataHouse is seeking a Senior Cyber Security Architect to design and drive the secure architecture of their platforms and client solutions across cloud and hybrid environments. This role involves leading threat modeling, control selection, and advising clients on compliance-aligned architectures while mentoring engineers and shaping security standards.

AnalyticsInformation Technology

Growth Opportunities

Responsibilities

Define secure reference architectures (network, identity, data, application, and cloud) for AWS/Azure; champion zero-trust and least-privilege patterns

Identify, assess, and mitigate security risks to protect company assets, data, and systems from external and internal threats

Develop and implement comprehensive security strategies and roadmaps that include key policies, procedures, and practices to safeguard the company’s information technology infrastructure

Ensure that security architecture meets regulatory requirements and compliance standards, such as GDPR, HIPAA, or industry-specific regulations

Translate ISO/IEC 27001, NIST (CSF/800-53/171), and HIPAA into practical architectures, patterns, and evidence requirements; support internal audits and renewals

Sit on internal and client architecture review boards; support executive-level guidance to SLED and healthcare clients

Work closely with senior leadership, including the CTO, and other department heads, to ensure security strategies align with business priorities and technology initiatives

Partner with SecOps to refine detection logic, playbooks, and tabletop exercises; ensure architectures support rapid containment and recovery

Coach engineers; author standards, patterns, and runbooks; lead brown-bags and security awareness sessions for delivery teams

Work with external vendors to evaluate and select security tools, technologies, and services to enhance the company’s security posture

Develop and implement frameworks for the secure design and deployment of cloud services, network infrastructure, and enterprise applications

Lead the evaluation and integration of new security technologies and methodologies to enhance the company’s security infrastructure

Collaborate with the IT department to ensure security controls are integrated into all software development and systems engineering processes

Define and enforce standards and best practices for secure software development, network security, data protection, and vulnerability management

Implement and continually improve the organization’s Information Security Management System (ISMS) to maintain ongoing ISO 27001 certification

Advise client leadership teams on IT governance, budget planning, security roadmaps, and risk management programs

Ensure security practices address requirements specific to healthcare, government, and other regulated industries

Qualification

Security Architecture DesignNIST ComplianceISO 27001Cloud SecurityRisk ManagementNetwork SecurityCISSP CertificationLeadership ExperienceAnalytical SkillsMentorshipCommunication Skills

Required

Bachelor's degree in Computer Science, Information Security, or a related field

6+ years of experience in information security, with at least 2 years in a senior security architecture role or similar management position

Proven experience in designing and implementing security architectures for large, complex systems across multiple platforms (cloud, on-premise, hybrid)

Expert knowledge of security frameworks, such as NIST, CIS, ISO 27001, comparable ISMS frameworks, and experience with industry compliance standards

Strong understanding of network security, encryption technologies, access controls, threat modeling, and risk management

Leadership and team management experience, with the ability to mentor and inspire a security team

Excellent problem-solving and analytical skills, with the ability to design secure systems and mitigate risks proactively

Proven track record delivering security services to external clients, including executive advisory and program governance

Strong ability to communicate risk and security strategy to executives, boards, and non-technical stakeholders

Preferred

Experience with public sector and healthcare IT security requirements preferred

Experience with cloud security, including public cloud platforms such as AWS, Azure, or Google Cloud

Certified Information Systems Security Professional (CISSP) or other relevant certifications (e.g., Certified Cloud Security Professional (CCSP), Certified Information Security Manager (CISM)) is preferred

AWS/Azure security certifications preferred