Security Solution Architect

Overview:

Hudson Valley Credit Union is currently recruiting for the position of Security Solution Architect. Primary Function: The Security Solution Architect is a critical leadership role responsible for designing, implementing, and maintaining the Security Solution Architecture for the organization's technology landscape. This role will report directly to the Senior Vice President (SVP) of Enterprise Architecture and will collaborate closely with architects, business leaders, IT teams, and risk and compliance stakeholders to ensure robust security postures across all platforms, products, and services. The Security Solution Architect will be a trusted advisor, shaping the company's strategy to safeguard assets, sensitive data, and systems in a rapidly evolving financial services environment.

Responsibilities:

• Develop, document, and maintain enterprise-wide Security Solution Architecture frameworks aligned with business goals and regulatory requirements. Ensure that all technology solutions meet company security standards and industry best practices.
• Collaborate with the SVP of Enterprise Architecture to establish long-term security strategies that support the organization's growth, innovation, and digital transformation initiatives.
• Conduct detailed threat modeling, risk analysis, and security gap assessments for new and existing systems. Recommend practical solutions and mitigation strategies, and ensure these are integrated into architectural designs.
• Develop and continuously improve security policies, standards, and guidelines. Ensure these frameworks are embedded in system and software development lifecycles
• Evaluate proposed solutions and changes to infrastructure for security compliance. Work with solution architects and engineering teams to recommend secure design patterns and controls.
• Design security models for cloud, hybrid, and on-premises environments, including identity and access management, encryption, and monitoring controls.
• Architect robust IAM solutions, including single sign-on (SSO), multi-factor authentication (MFA), privileged access management, and identity governance.
• Ensure all Security Solution Architectures meet or exceed regulatory requirements (e.g., PCI-DSS, SOX, GLBA, GDPR). Partner with compliance teams during audits and reporting cycles.
• Ensure all Security Solution Architectures meet or exceed regulatory requirements (e.g., PCI-DSS, SOX, GLBA, GDPR). Partner with compliance teams during audits and reporting cycles.
• Advocate for security best practices and facilitate training for engineering and business teams. Represent Security Solution Architecture expertise across cross-functional groups
• Assess emerging security technologies, frameworks, and platforms. Make recommendations for adoption and integration based on business value and risk reduction.
• Evaluate third-party vendors, products, and managed services for security posture. Participate in contract negotiations and define security-related requirements
• Lead efforts to continuously evolve and mature the organization's Security Solution Architecture. Benchmark against industry trends and foster a culture of security-first thinking.
• Adhere to all Credit Union policies, procedures, and regulatory agency requirements. Participate in all required and recommended training and development including, but not limited to,