Information Security Architect

LTHC

. Assist in developing and executing the information security risk management strategy and risk assessment philosophy .

Posted 10/16/2026full-timeRochester • New York • United StatesMid-LevelSenior💰 $87,766 - $198,168 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security Risk Management, including the development and execution of security architecture principles, risk assessment strategies, and compliance with security standards. Proficient in identity and access management, network security, and disaster recovery planning.

Highest-signal resume keywords

Information Security Risk ManagementIdentity And Access ManagementNetwork And Application-Level SecuritySecurity Architecture DevelopmentDisaster Recovery Planning

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentSecurity Event ManagementMulti-Factor AuthenticationFirewall ArchitectureCloud Security ControlsApplication SecurityPKI System ImplementationData Loss PreventionIntrusion Detection And PreventionShell Scripting

Soft Skills

Exceptional Communication SkillsInfluencing SkillsCollaborative WorkSound JudgmentRelationship Management

Tools & Technologies

Active DirectoryLDAPTCP/IP ProtocolsSecurity TechnologiesWeb Server SecurityMobile SecurityRemote Access Security ControlsUser ProvisioningSingle Sign-OnSecurity Standards Compliance

Industry Keywords

Sarbanes OxleyHIPAAPCI/DSSISO27001NISTCOBITCOSO

Tech Stack

Tools & technologies

CloudJavaPerlShell ScriptingTCP/IPC++

About the role

Key responsibilities & impact

Assist in developing and executing the information security risk management strategy and risk assessment philosophy
Support the IT components of the Enterprise Risk Management program
Participate in IT security investment analysis, design, scope, and approach
Provide technical expertise to the Information Security Group and serve as a trusted security advisor to business and divisional initiatives
Ensure secure, risk-based, cost-effective infrastructure and application designs are developed and maintained
Advise and consult with Information Security management and business and IT leadership
Develop and implement security architecture principles and standards
Drive adoption and compliance of security standards across development and infrastructure teams
Create functional and technical security requirements throughout project lifecycles
Execute risk management strategies with business and divisional stakeholders
Create disaster recovery and business continuity plans
Perform risk-based assessments of solutions and vendors
Provide security consultation, design reviews, and recommendations
Provide hands-on support for Security and Risk Department technologies
Establish collaborative relationships across the organization and subsidiaries
Develop processes, standards, and templates for managing information security risks
Support implementation of standards and solutions with divisional teams
Level II: lead security architecture development and implementation
Level II: foster a risk management culture through education, skill development, and effective processes
Level II: mentor department staff and provide subject matter expertise

Requirements

What you’ll need

Five (5) years of experience in an Information Technology Security Role for Level I
Seven (7) years of related experience in an Information Technology Security Role for Level II
Bachelor’s degree in computer science, information technology or relevant field, or six (6) additional years of experience in lieu of a degree
Exceptional communication and influencing skills
Ability to work collaboratively with all stakeholders
Experience with identity and access management architecture and implementation, user provisioning/de-provisioning, and single sign-on
Experience with enterprise directories (AD and LDAP)
Experience with multi-factor authentication
Experience with network and application-level security and encryption
Experience with security event management
Experience with firewall architecture and design
Experience with cloud security controls
Experience with web server security
Experience with application security
Experience with PKI system implementation
Experience with data loss prevention systems and implementation
Experience with intrusion detection and prevention systems for network and host systems
Experience with remote access security controls
Experience with mobile security
Strong knowledge of TCP/IP protocols and broad and deep conceptual understanding of applications, application platforms, operating systems, and networks
Experience with shell scripting, Perl, another scripting language, or programming languages such as Java, C++, or C
Familiarity with Sarbanes Oxley, HIPAA, HCFA, PCI/DSS, ISO27001, NIST, COBIT, and COSO
Demonstrated ability to work with a diverse team and help shape Security Architecture
Sound judgment and relationship management skills
Understanding of process in a maturing IT environment
Ability to learn newer security technologies and integrate them into larger corporate solutions
Ability to translate real-world threats into actionable security tasks
Level II: prior experience with architecture processes, strategies, and standards required
Level II: experience coordinating vendor solution delivery and partnering with vendors
Ability to travel across the Health Plan service region as needed
Ability to work prolonged periods at a workstation and on a computer

Benefits

Comp & perks

Group health and/or dental insurance
Retirement plan
Wellness program
Paid time away from work
Paid holidays
Opportunity for remote work, decided on a case-by-case basis
Ability to work in a home office for continuous periods of time for business continuity