Apply on Employer Site

Texas Children's Hospital · 11 hours ago

Data Security Architect, Sr

Houston, TX

Full-time

Onsite

Senior Level, Lead/Staff

10+ years exp

Texas Children's Hospital is looking for a Senior Data Security Architect/GRC Analyst who will support the organization's governance, risk, and compliance initiatives. This role focuses on identifying and mitigating IT and cybersecurity risks while ensuring alignment with regulatory and industry standards to protect sensitive information and maintain a strong security posture.

EducationHealth Care

H1B Sponsor Likely

Responsibilities

Provide guidance on IT and cybersecurity risk-related matters, including identifying, assessing, and prioritizing risks across systems and business processes

Collaborate with business owners, service owners, control owners, and technical teams to design, implement, and maintain risk-mitigating controls that reduce exposure to threats and support organizational compliance objectives

Perform assessments of IT and security controls to verify effectiveness, ensure ongoing compliance, and identify opportunities for improvement

Support the execution and delivery of internal and external assurance activities such as audits, security assessments, certifications, and compliance reviews, ensuring control evidence and documentation are complete and accurate

Track, document, and report gaps, control exceptions, and issues; guide remediation activities and validate resolution to closure

Review and provide input on information security policies, standards, and procedures to ensure continued alignment with applicable laws, regulations, and industry frameworks

Provide advisory support to other GRC workstreams such as vendor risk management, and security awareness, ensuring consistent control expectations across the enterprise

Offer guidance on implementing controls to mitigate risks associated with the use of AI technologies, including data privacy, model integrity, and algorithmic transparency, ensuring alignment with internal AI policies and applicable regulatory requirements

Serve as a subject matter expert to various departments and project teams, offering guidance on appropriate security, technical, and privacy controls that safeguard organizational assets and sensitive data

Develop or assist in creating executive-level presentations, reports, and dashboards that communicate cybersecurity performance, risk metrics, and control effectiveness to leadership for strategic decision-making

Utilize enterprise GRC platforms such as ServiceNow GRC to manage risk and compliance workflows; familiarity with Data Loss Prevention (DLP), Data Classification, Shadow IT tools, and other cybersecurity tools is preferred

Qualification

GRC experienceNIST Cybersecurity FrameworkInformation security complianceRisk managementGRC platformsAI governanceIT security controlsAnalytical skillsCommunication skillsPresentation skillsCollaboration skillsProblem-solving skillsAttention to detailAdaptability

Required

3–5 years of experience in GRC, IT audit, information security, or risk management within a regulated industry (healthcare or insurance preferred)

Working knowledge of frameworks such as NIST CSF, NIST SP 800-53, HIPAA Security Rule, and state or accreditation-based security standards (e.g., Texas HHS, TDI, Joint Commission)

Familiarity with internal controls over financial reporting audit requirements such as SOX, AFRMR (MAR)

Understanding of emerging AI governance and compliance considerations, with the ability to recommend appropriate controls to mitigate AI-related risks

Experience using GRC platforms (e.g., ServiceNow GRC, Archer, OneTrust, or similar)

Strong understanding of IT and security control domains (access management, configuration management, vulnerability management, incident response, asset protection, etc.)

Excellent communication and presentation skills with the ability to translate technical details into business-relevant insights

Required H.S. Diploma or GED

10 years' experience in information security, computer management, identity access management, or IS networking, including at least 5 years of information security experience

Preferred

CISSP - Cert.Info.Sys Security Profes. ISC2

SANS - SysAdmin, Audit, Network, Sec. SANS

HCISPP – Cert.Info.Sec.Priv.Profes. ISC2

Security+ CompTIA

CCSP Cert.Cloud.Sec.Profes. ISC2

SSCP Sys.Sec.Cert.Profes. ISC2

Company

Texas Children's Hospital

Glassdoor3.9

Texas Children’s Hospital is a world-class pediatric facility, nationally recognized as a top children’s hospital.

Founded in 1954

Houston, Texas, USA

10001+ employees

http://texaschildrenspeople.org/

H1B Sponsorship

Texas Children's Hospital has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2025 (9)

2024 (18)

2023 (9)

2022 (12)

2021 (11)

2020 (12)