Assistant Vice President, Enterprise Security Architecture

Overview

To plan, manage, and direct the development, governance and review of Navy Federal's Security Architecture, including documentation, review, discussion and advocacy. Responsible for proposing, developing, advocating for and enforcing security architecture requirements for systems and applications deployed at Navy Federal. The AVP works cross-functionally across the organization to ensure that the organization's Security Architecture supports business goals and strategies while protecting our members' interests, assets and information. This role will oversee and direct a branch of high-level professionals to achieve short- and long-term goals.

Responsibilities

• Plan, direct and oversee Security Architecture team daily operations, provide guidance and technical insight for portfolio planning and prioritization
• Maintain a deep understanding of security practices, processes, and interdependencies across Navy Federal and third parties
• Contribute to the strategy, planning and implementation of enterprise-wide security initiatives, including Zero Trust architecture and IAM modernization
• Manage and approve Security Architecture policies, procedures and standards utilized by distributed technology teams across Navy Federal; evaluate technical projects and initiatives and enforce security standards
• Build strong working relationships with key executive and technical stakeholders across ETS and InfoSec ensuring strategic alignment and maximizing operational efficiency regarding security initiatives and policies
• Stay abreast of emerging technologies, industry best practices, external perspectives, and relevant government/policy updates and impacts
• Provide architectural expertise and strategic direction, to the Security Architecture team, project teams, and leadership
• Provide updates and expertise to ETS Senior Leadership and InfoSec on Security Architecture challenges or status updates
• Collaborate with Senior Leadership and InfoSec to develop the long-term strategic direction and roadmap for Security Architecture
• Continuously improve architecture tools, processes, and delivery artifacts to maintain relevance and maximize operational efficiency
• Ensure timely, accurate and quality-driven development of Security Architecture per-project
• Ensure that proposed and existing Security Architectures are aligned with established standards, goals and objectives set by ETS and InfoSec
• Establish and monitor internal/external controls for compliance and audit purposes; provide reporting regarding adherence to security architecture requirements and standards
• Perform supervisory/managerial duties:

• Hire, on-board, train, and develop new Security Architects, analysts and/or people managers
• Establish performance goals and priorities; capture performance metrics and provide feedback
• Prepare, conduct, and review performance appraisals
• Develop, mentor and counsel a Security Architecture team
• Provide input and/or prepare budget requirements for Annual Financial Plan (AFP)
• Ensure goals and objectives align with ETS's Technology and Architecture strategy
• Ensure efficiency of operations

• Bachelor's degree and ten years of experience in Cybersecurity, Information Security, Information Technology, or related field, or the equivalent combination of education, training, and experience
• Advanced knowledge of the activities within the lines of business; experience in the financial industry preferred with knowledge of industry standards (FFIEC, GLBA, NCUA, PCI DSS, TOGAF, SABSA, Zachman)
• Significant experience with security architecture strategies such as defense in depth and zero trust practices
• Experience as a process owner, responsibility for introducing and optimizing processes, practices, and changes at an enterprise level and coordinating across business units effectively
• Advanced knowledge of risk management and regulatory requirements pertaining to information security, privacy and/or data protection
• Advanced knowledge of industry standards and practices (ISO, NIST, COBIT, COSO, ITIL)
• Experience leading teams of high-level professionals and managers, including career development, performance management and allocation resources based on workforce needs
• Ability to interpret and consistently apply complex policies, requirements and regulations across a large, complex organization
• Advanced analytical skill with an emphasis on using an inquiry-based approach, methodical critical questioning, and logical thinking; exercising sound judgment with the ability to identify and report on key findings
• Expert communication and interpersonal skills to interact with staff and leaders at all levels of the organization
• Advanced skill speaking and or presenting in front of all levels of the organization in a professional setting to include facilitating workshops, discussions and creating compelling and engaging presentations

• Experience managing diverse teams and handling administrative and human resources actions
• Expert knowledge: CISSP, CISM, and other security certifications preferred
• Mastery of industry standards as shown by certifications: (ISACA, NIST, COBIT, COSO, ITIL)
• Experience (and preferably certification) in agile methods and ways of working; Six Sigma or process analysis and/or change management background
• Advanced knowledge of Navy Federal's functions, philosophy, operations and organizational objectives