Information Security Architect

Job Summary

Reporting to the Director of IT Security and working closely with the campus community and outside parties, the information security architect protects the people, the information, and the systems of Drexel University through the design, implementation, and support of security architecture and programs.

Essential Functions

• Support the Director of IT Security's work on leadership, strategy, policy, risk management, disaster recovery, business continuity, compliance, external relations, and emerging technologies and threats.
• Lead and oversee vulnerability and risk management activities, including identification, prioritization, and coordination of remediation efforts.
• Guide the evaluation and management of third-party vendors, consultants, and related risk assessment activities.
• Provide expertise in incident response, forensics, and threat detection, including advising on response strategies and improvements.
• End-point security, including encryption at rest.
• Network security, including encryption in transit.
• Cloud computing and software contracts.
• Support coordination and continuous improvement of security operations and monitoring capabilities.
• Other duties as assigned

Required Qualifications

• Minimum of a Master's Degree in computer science, information systems, or a related field, or the equivalent combination of education and work experience. (Please review the Equivalency Chart for additional information.)
• Minimum of 3 years of experience experience in information security or 5 total years of experience in information technology, with at least 1 focusing on information security.
• Mastery of and experience with 4 or more of the following functions:
  
  
  
  
  • Management of information security technologies to protect information, networks, servers, endpoints, and cloud services (e.g., firewalls, antivirus, encryption, data leak prevention, security information and event management systems, and intrusion detection and prevention systems)
  • Risk assessment and third-party/vendor security management
  • Vulnerability and threat management
  • Incident detection, documentation, response, and remediation
  • Identity management
  • Application of information security and privacy laws, regulations and guidelines, (e.g., data breach state laws, FERPA, HIPAA, NIST, PCI-DSS, DFARS, and GDPR)
  
  
  
  

Location

• University City - Philadelphia, PA

Additional Information
This position is classified as Exempt, grade N. Compensation for this grade ranges from $99,720 -$149,580 per year. Please note that the offered rate for this position will vary based on the successful candidate's qualifications and experience, department budget, and an internal equity review.

Applicants are encouraged to explore the Professional Staff salary structure and Compensation Guidelines & Policies for more details on Drexel's compensation framework. For information about benefits, please review Drexel's Benefits Brochure.

Special Instructions to the Applicant
Please make sure you upload your CV/resume and cover letter when submitting your application.

A review of applicants will begin once a suitable candidate pool is identified.