Security Architect

Security Architect at IntePros

IntePros is seeking a Security Architect to support our pharmaceutical services client. This person will play a critical role in strengthening the security posture of enterprise applications and systems. They will partner closely with business and technology stakeholders to proactively reduce security risks by identifying and mitigating vulnerabilities across design, development, and production environments. This person will provide security guidance throughout the SDLC, review and assess project artifacts, and ensure alignment with organizational security standards and industry best practices.

Key Responsibilities

• Define security requirements by evaluating business strategies, system requirements, and applicable information security standards
• Provide security consulting and technical guidance to internal business and technology teams
• Serve as the primary security liaison for assigned projects and initiatives
• Advise development teams on secure architecture, design, coding practices, and SDLC considerations
• Review application architectures and designs to ensure alignment with organizational security standards and industry best practices
• Validate and assess security controls, including encryption, access control, web application security, OWASP Top 10, and vulnerability detection mechanisms
• Serve as a subject matter expert for vendor and third-party risk assessments, including cloud service providers
• Assist in the development and maintenance of secure coding standards
• Provide technical expertise on secure software development practices, tools, and processes
• Ensure development activities align with secure development standards and regulatory expectations
• Facilitate static code analysis, dynamic testing, and manual security testing using established service offerings
• Review security gaps and drive corrective action planning and remediation
• Develop, test, and implement security plans, controls, and protection mechanisms
• Maintain awareness of emerging security and technology trends and share insights across teams
• Promote and evangelize security policies, standards, and nonfunctional requirements
• Produce regular status reporting on work in progress, planned activities, and identified issues
• Document processes, procedures, assessments, and supporting artifacts in alignment with SDLC and governance requirements
• Represent security and IT risk considerations in cross-functional risk forums and committees
• Evaluate the effectiveness of security awareness and training programs and recommend improvements
• Mentor junior team members and collaborate broadly across Information Technology

Required Qualifications

• Bachelor’s degree in Computer Science, Information Systems, or a related field, or equivalent professional experience
• 10–15 years of combined IT and security experience, including systems analysis, application development, and systems administration
• At least 5 years of experience designing and implementing security solutions for enterprise-level applications, products, or services
• In-depth knowledge of security principles, technologies, and risk implications across modern computing platforms
• Experience evaluating and implementing security controls for cloud-based services, including SaaS, PaaS, and IaaS
• Strong analytical, problem-solving, and decision-making skills
• Excellent written and verbal communication skills with the ability to engage both technical and non-technical stakeholders
• Proven ability to prioritize work, meet deadlines, and operate effectively in a matrixed organization
• Strong consultative skills with the ability to influence project and product teams

Preferred Qualifications

• One or more security certifications such as CISSP, CISM, CISA, CCSP, CCSK, or AZ-500
• Working knowledge of network solutions and infrastructure
• Demonstrated experience with at least three security or compliance frameworks (e.g., ISO 27001/27002, NIST, HITRUST, PCI, GDPR)

Key skills/competency

• Enterprise Security
• Cloud Security
• SDLC Security
• Risk Management
• Vulnerability Management
• Security Architecture
• OWASP Top 10
• Compliance Frameworks
• Secure Coding
• Stakeholder Engagement