Principal Security Architect

Company Description

Intelligent compliance. Sustainable progress. A safer world. At 3E we help our clients ensure safety, compliance and sustainability. We provide actionable intelligence and solutions that empower safer, more sustainable products and business processes.

Job Description

Verisk 3E is looking for a Principal Security Architect to join our growing company. This is an exciting opportunity to come in and build a security program from the ground up, while working and collaborating with teams across the globe. We are open to this role being fully remote in the US.

As Principal Security Architect, your primary focus will be to ensure our architecture and software designs meet security requirements across cloud and data center environments. You will work closely with development, product, and infrastructure groups to define requirements and deploy security solutions to meet best practices for secure infrastructure and application architecture.

Responsibilities include implementation and support of our security suite of tools including vulnerability scanners, proxies, firewalls, SIEM, and endpoint protection. Requires an ability to collaborate with multi-discipline teams to investigate and remediate incidents as well as experience implementing AWS cloud security controls.

• Provide security architecture and advice in support of application development, infrastructure, and enterprise technology projects.
• Identify any gaps in existing application security infrastructure to meet project requirements, and work with the Development and Product Management teams to identify and roadmap solutions.
• Establish architectural standards that enable DevSecOps practices such as infrastructure as code, and automated continuous integration/continuous deployment (CI/CD).
• Design and develop security monitoring architectures for cloud and cloud/hybrid-based systems.
• Design and implement architectures that meet common security frameworks: NIST, SOC2, ISO27001
• Design and implement systems and processes to establish effective governance and risk compliance.
• Perform regular assessments to evaluate security risks and identify and define compliance strategies in accordance with policies and standards.
• Stay abreast of current security threats and security technologies and regularly communicate those findings to peers and management.

Qualifications

• Bachelor’s/Master’s degree in a technical field with 5+ years experience as Security Architect.
• Security certifications CISSP, CISM or CISA.
• Production experience architecting security solutions within Amazon Web Services (AWS).
• Experience working with development teams to design and build security solutions.
• Knowledge and experience with Security, Identity, and Compliance tools.
• Ability to manage demands of internal and external customers through phone, email and process requests
• Strong organizational skills to manage fast paced and demanding requests in a defined service level
• Knowledge of data security fundamentals and best practices with prior responsibilities of protecting information assets.
• Excellent written and verbal communication skills.
• Technologies:
  • Azure DevOps, Splunk, Crowdstrike, Proofpoint, Tenable IO, OKTA, Imperva
  • AWS Config, Cloudtrail, Cloudwatch, Security Hub, Guardduty

#LI-SH1

Additional Information

Intelligent compliance. Sustainable progress. A safer world. At 3E we help our clients ensure safety, compliance and sustainability. We provide actionable intelligence and solutions that empower safer, more sustainable products and business processes.

Additional information

For more than 30 years the world’s leading companies have trusted 3E to provide the intelligent compliance solutions they need to ensure safety and sustainability—one product, one workplace and one community at a time. Our unmatched Environmental, Health, Safety and Sustainability (EHS&S) and product compliance expertise empowers our clients to improve chemical and workplace safety, product safety and stewardship, supply chain transparency and R&D decision support

We are deeply committed to serving our more than 5,000 customers worldwide, including nine of the world’s top ten chemical manufacturers, eight of the world’s top ten retailers and seven of the world’s top ten pharmaceutical companies.

Together we are building a safer world and a more sustainable future. Join us!

In March 2022, New Mountain Capital and Endicott Capital acquired our business from Verisk, kicking off the next phase of growth in our 30-year history. Backed by the support and expertise of New Mountain and Endicott, we are now perfectly positioned to grow our business to better serve our valued customers and partners. To learn more, visit www.3eco.com.

3E is an equal opportunity employer

Consumer Privacy Notice

At Verisk 3E, the health and safety of our people is our number one priority. Effective November 15, 2021, and subject to applicable law, all prospective hires for office-based roles or roles that support any of our businesses’ government contracts will be required to demonstrate that they are fully vaccinated against COVID-19 by their start date or qualify for a legally-required medical or religious accommodation to this vaccination requirement, as a condition of employment. Hired candidates who do not demonstrate that they are fully vaccinated against COVID-19 by their start date, and who have not been approved for a legally required medical or religious accommodation will no longer meet the requirements for employment and their offers of employment will be immediately rescinded, in accordance with applicable law.