Cyber Security Architect

Cyber Security Architect

At Regions, the Cyber Security Architect contributes to the advancement of Regions’ cyber security program and its capabilities through developing, communicating, and implementing a security architecture.

• Contributes to the development and establishment of a strategic cyber security architecture and strategic vision, including standards and frameworks that are aligned with the overall business and Regions’ information technology strategy.
• Works closely with Enterprise Architecture and Application Development groups to enhance the security posture of new and existing systems.
• Contributes to the design of cyber security architecture, evaluates and mitigates potential risk, and, when necessary, approves implementation of systems and applications into production.
• Performs assessments using the National Institute of Standards and Technology (NIST) Cyber Security Framework and the Federal Financial Institutions Examination Council (FFIEC) Cyber Assessment Tool to identify gaps and remediate deficiencies.
• Ensures systems and applications are implemented with compensating controls to meet regulatory requirements (e.g. GLBA, SOX, HIPPA, FFIEC, etc.) as well as other organizational compliance (PCI) requirements.
• Tracks metrics for compliance to internal cyber security standards set by application and system owners.
• Offers advice and guidance to junior architects, assisting in the development of necessary skills and technical knowledge.

• Bachelor’s degree in Computer Science, or related field.
• Five (5) years of experience in cyber security, with a focus on software development, secure software development lifecycle (SDLC), or security architecture.

• Experience in the design and implementation of cyber security solutions.

• Ability to effectively evaluate risk vs. reward.
• Ability to independently problem solve with sound judgement.
• Ability to translate complex technical information across all levels of the organization through communications and/or presentations.
• Ability to work in a team environment when applicable.
• Advanced knowledge of risks associated with virtualization and cloud-based computing and the impact of those technologies on an organization's security posture.
• Advanced knowledge of security principles, solutions, tools, methodologies, and techniques.
• Proficiency in Microsoft Office (Excel, Word, PowerPoint, Outlook, etc.).
• Strong project management skills.
• Strong verbal, written communication, and organizational skills.
• Strong work ethic and self-motivation.

This position is intended to be onsite, now or in the near future. Associates will have regular work hours, including full days in the office three or more days a week. This position must be within a reasonable driving distance to a Branch, Consumer Operations, or Professional Office Building with the primary location being for Birmingham, AL, Nashville, TN, Atlanta, GA or Charlotte, NC.

The manager will set the work schedule for this position, including in‑office expectations. Regions will not provide relocation assistance for this position, and relocation would be at your expense.

Full time

Pay ranges are job specific and are provided as a point‑of‑market reference for compensation decisions. The target information listed below is based on the Metropolitan Statistical Area Market Range for where the position is located and level of the position.

• Job Range Target: $ USD
• Median: $ USD

• Paid Vacation/Sick Time
• 401(k) with Company Match
• Medical, Dental and Vision Benefits
• Disability Benefits
• Health Savings Account
• Flexible Spending Account
• Life Insurance
• Parental Leave
• Employee Assistance Program
• Associate Volunteer Program

Riverchase Operations Center – Hoover, Alabama

Disability/Veterans

Job applications at Regions are accepted electronically through our career site for a minimum of five business days from the date of posting. Job postings for higher‑volume positions may remain active for longer than the minimum period due to business need and may be closed at any time thereafter at the discretion of the company.