Security Architect

Providing input and recommendations to the development teams related to architecture, design, coding practices and SDLC elements that could potentially impact the application or solution from a security perspective.

Validating controls for Encryption, Access Control, Web Application Vulnerability Detection, OWASP top 10 and other common web application security parameters.

Reviewing application architecture and design from an application security and information security perspective ensuring alignment with organization security standards and industry best practices.

Serving as a subject matter expert (SME) for performing vendor risk assessments (including Cloud Services) to improve overall vendor risk program.

Providing technical expertise on secure software development and support of all associated activities, processes, and tools for protecting technology-based information

Ensuring that development is done in accordance with industry standards for secure development

Facilitating Periodic static code analysis utilizing existing standard service offering.

Facilitating dynamic and/or manual security testing utilizing existing standard service offering

Reviewing, developing, testing, and implementing security plans, products, and control techniques

Reviewing circumstances surrounding security gaps in and designs corrective actions

Maintaining awareness of security and technology trends and shares that knowledge with others

Evangelizing security policies, standards, and nonfunctional requirements where/when needed

Daily and Weekly Status Reporting - for Work in Process and Planned and issues

Documenting processes, procedures, assessment outputs, working papers documentation to support existing SDLC and governance requirements

Representing security and IT risks among other company risk departments and committees.

Evaluating the effectiveness of awareness and training programs and makes recommendations for improvement.