Position:
Security Architect - Database

Job Description:

Arrow Electronics is currently seeking an experienced Database Security Architect to support our global company and its subsidiaries. The Database Security Architect will be responsible for the following activities and functions:

• Lead the Cloud and On-premises database security domain for Arrow's Enterprise Security Services program.
• Develop and maintain Arrow's database security architecture program enabling the enterprise to develop and implement security solutions and capabilities that are clearly aligned with business, technology and the risk posed by an evolving threat landscape.
• Draft security standards, procedures, diagrams and guidelines to be reviewed and approved by executive management and/or formally authorized by Arrow's CSO.
• Recommend database security configurations and initiatives to address the identified risk areas associated with the data assets that are also based on security best practices, industry standards and/or remediation guidance discerned from assessments.
• Evaluate the current state of data protection capabilities, inclusive of discovery, classification, and protection policy formulation.
• Conduct security assessments as part of the overall risk management practice of the organization.
• Develop strategies for securing Arrow's Restricted Data during database refreshes and data promotion activities by using database specific security tools (masking, redaction, encryption).
• Provide guidance on the management and implementation of database models, data flow diagrams, database schemas, database scripts, to support a robust data management infrastructure.
• Assist the database management teams with Implementing data masking, anonymizing PII and confidential data.
• Align database security controls to follow compliance and regulation requirements.
• To ensure security-related matters are adequately conveyed, strong communications skill (written and oral to all levels in the organization) along with strategic planning and project management skills are necessary.

• Is recognized as an expert within the organization, both within and beyond own function.
• Anticipates internal and/or external business technical challenges and/or regulatory issues; recommends process, product or service improvements.
• Solves unique and complex problems that have a broad impact on Arrow's business.
• Can provide guidance and communicate well with highly technical teams.
• Contributes to the development of a functional enterprise database security strategy.
• Self-motivated to operate with little supervision in a complex environment.
• Guides others in resolving complex issues in specialized area based on existing solutions and procedures.
• Serves as an expert within own discipline.
• Serves as a resource for best practices/quality on functional teams or projects.
• Trains/mentors junior staff.

• Must possess direct, documented and verifiable experience with some or all the following database environments: Oracle, MS SQL, Mongo DB, AWS S3, Azure SQL PaaS, Databricks, Snowflake and others.
• Be familiar with big data/cloud-based databases technologies.
• Experience with implementation of tokenization as a solution for meeting PCI-DSS compliance standards is desirable.
• Must possess a working knowledge of SQL Language.
• Must possess knowledge of database encryption algorithms.
• Typically requires a minimum of 10 years of related experience with a 4 year degree; or 8 years and an advanced degree; or equivalent experience.
• Security centric certifications such as CISSP, CISM, CISA or others is required.
• Capable of (up to) 15% travel required.