Cyber Security Architect

The Information Security Architect is responsible for effectively understanding and assisting in the implementation of security solutions for Coterra. This position needs to intently focus on prioritization and always seek improvement of processes and tools. A successful Architect will have a multidisciplinary background beyond cyber security, in fields such as client and server systems, networking, and application development. The Architect is responsible for the defense and protection of computer systems, information, and networks from intentional and unintentional access, modification or destruction by effectively engineering and implementing all information security systems. This position will interface with user and technology communities to understand their security needs and implement solutions to accommodate them.

• Participates in and/or leads security related projects as directed by the Manager of Infrastructure

• Participates in IT and Business projects as needed to support information security architecture and integration of all appropriate security elements

• Provides ongoing expertise to the business related to information security best practices and architecture

• Participates in, and/or leads information security audit activities

• Researches the threat landscape and conducts vulnerability analysis on emerging risks to the organization in order to provide recommendations regarding remediation activities to management

• Participates in the information security risk assessment process

• Works with third-party support and security equipment vendors to advance the goals of the security department, while maintaining accountability for those partners

• Conducts research on information technology products and services in support of procurement and development efforts, as well as evaluates and recommends products for purchase

• Participates in the creation and upkeep of information security processes and documentation

• Counsels teams on the management of residual risk based on product purchase or system design

• Participates in the creation and upkeep of information security processes and documentation

• Provides mentor leadership to other Information Technology staff

• Other tasks as assigned

• CISSP, CASP, CISM, or other senior security generalist certification required

•  Knowledge and understanding of SDLC required

•  Excellent technical knowledge of IT infrastructure and application development

•  Good understanding of the Company’s goals and objectives

•  Knowledge of applicable data privacy practices and laws

•  Ability to prioritize and execute tasks in a high-pressure environment and make sound decisions in emergency situations

•  Above-average interpersonal, written and oral communication skills

•  Ability to present ideas in a user-friendly language

•  Highly self-motivated and directed

•  Keen attention to detail

•  Proven analytical and problem-solving abilities

•  Strong customer service orientation; experience working in a team-oriented, collaborative environment

Minimum

4 Year / Bachelors Degree

Bachelor’s degree in Management Information Systems, Computer Information Systems, Computer Science or related field required; Combination of education and experience may be considered in lieu of degree

5-7 years

Minimum of 5 years in Information Security and 7 years in Information Technology required

1-2 years

Minimum of 2 years of incident handling experience desired

Work is typically performed indoors in an office environment. Incumbents must be able to perform work which includes typing, sitting and standing. In the event that incumbent visits operations worksite, personal protection equipment, including head protection, hearing protection, safety glasses, safety shoes, and flame resistant clothing is required. Safety rules including OSHA and DOT requirements are strictly enforced. Employees must be willing to travel and work extended hours on short notice.

Less than 5%

Travel may be required for mandatory meetings or training.