Enterprise Cybersecurity Architect

PAM Health

. Develop, maintain, and govern PAM Health’s enterprise security architecture, technical security standards, design patterns, and reference architectures .

Posted 9/23/2026full-timeRemote • Texas • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity architecture, risk management, and compliance within healthcare environments, with a strong focus on secure development practices and incident response. Proven ability to communicate complex technical concepts to diverse audiences and mentor security teams to uphold enterprise security standards.

Highest-signal resume keywords

Cybersecurity ArchitectureHealthcare Cybersecurity ExperienceCertified Information Systems Security Professional (CISSP)OWASP Top 10 ExpertiseNIST Cybersecurity Framework Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingSecurity Design ReviewsVulnerability ManagementPenetration TestingData ProtectionIncident ResponseSecure Development PracticesArchitecture DocumentationRisk AssessmentCompliance Standards

Soft Skills

Strong Communication SkillsMentoringTeam LeadershipCoachingCustomer Service Orientation

Tools & Technologies

Cloud SecurityIdentity ManagementNetwork SecurityApplication SecurityAI/ML Security

Certifications & Qualifications

Certified Information Systems Security Professional (CISSP)GDSASABSACCSPOSCPGPENHCISPP

Industry Keywords

NISTHIPAAMITRE ATT&CKOWASPHealthcare CybersecurityMedical Device SecurityRegulatory ComplianceClinical InformaticsManaged Security Service ProvidersISO 27001

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Develop, maintain, and govern PAM Health’s enterprise security architecture, technical security standards, design patterns, and reference architectures
Review enterprise, cloud, clinical, network, application, data, artificial intelligence, and medical device initiatives for security requirements
Conduct threat modeling and security design reviews for systems, major changes, integrations, and third-party solutions
Define security requirements and architecture guardrails aligned with NIST, HIPAA, MITRE ATT&CK, OWASP, and applicable regulations
Identify architectural risks, document controls, recommend remediation, and communicate technical and clinical impact
Establish secure cloud, identity, network, endpoint, application, data protection, logging, monitoring, and incident response design standards
Partner with IT, Network Operations, Clinical Informatics, Compliance, Privacy, Legal, and business leaders
Provide technical direction and oversight to managed security service providers, vendors, consultants, and third parties
Support application security through secure development requirements, architecture reviews, vulnerability management, penetration testing, and remediation guidance
Evaluate AI and machine learning systems for data protection, access control, model risk, dependencies, and misuse scenarios
Assess medical devices and connected clinical technologies for cybersecurity risk and recommend compensating controls
Support security incidents with architecture analysis, containment guidance, root-cause review, and recurrence-prevention recommendations
Maintain knowledge of emerging threats, security technologies, healthcare cybersecurity requirements, and industry practices
Mentor security and IT staff and promote consistent security standards across the enterprise
Coach, evaluate, develop, and inspire staff; set expectations and recognize achievements
Promote customer service, confidentiality, safety, OSHA training, universal precautions, and emergency procedures
Support significant security incidents outside standard business hours when required

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related technical field, or an equivalent combination of education and experience
Certified Information Systems Security Professional (CISSP) must be obtained within six (6) months of hire and maintained in good standing
Ten (10) years of progressive experience in cybersecurity
Seven (7) years of cybersecurity experience in healthcare, including provider, health system, or comparably regulated clinical environments
Five (5) years in a security architecture or senior technical role
Three (3) years of application security experience
Experience providing technical direction to third-party security providers and managed security service providers
Demonstrated expertise with the OWASP Top 10 and secure development practices
Working knowledge of MITRE ATT&CK, the NIST Cybersecurity Framework, and the HIPAA Security Rule
Ability to translate technical risk into business and clinical impact for executive and clinical audiences
Strong written and verbal communication skills
Ability to produce highly technical architectural documentation and present complex concepts to non-technical executive leadership
Facility access, screening, and health requirements may apply during clinical facility visits
Preferred: Master’s degree in Computer Science, Cybersecurity, or a related technical field
Preferred certifications: GDSA, SABSA, CCSP, OSCP, GPEN, or HCISPP
Preferred experience with medical and connected clinical device security, penetration testing, red team operations, adversarial design review, AI/ML security, HITRUST, SOC 2 Type II, ISO 27001, 42 CFR Part 2, PCI DSS, FDA software-as-a-medical-device requirements, and geographically distributed clinical environments
Familiarity with OWASP Top 10 for Large Language Model Applications, NIST AI Risk Management Framework, and MITRE ATLAS preferred
Cloud security architecture experience across multiple cloud service providers preferred

Benefits

Comp & perks

Remote work arrangement
Travel reimbursement or support for travel to facilities across the enterprise (not explicitly stated as a benefit)
Professional development through professional organizations and/or continuing education
Employee Health requirements and OSHA-required training
Opportunity to mentor and develop security and information technology staff