Head Enterprise Architect - Security

At T. Rowe Price, the mission of the Enterprise Architecture (EA) function is to empower the firm to achieve its strategic objectives through the optimal use of technology. The EA function will align technology with business capabilities to enable effective strategy execution and business transformation. By monitoring and adopting emerging technologies, EA will drive technology enabled innovation and keep the firm ahead of industry disruption. 

Position Summary:

We are seeking a highly experienced and strategic Head Enterprise Architect - Security to join our team. This role is responsible for the design, development, and implementation of the enterprise's security architecture. The ideal candidate will possess deep expertise in security architecture, exceptional leadership skills, and a proven track record of managing complex security projects. 

Key Responsibilities: 

Strategic Planning and Development: 

• Develop and maintain the enterprise security architecture strategy and roadmap. 

• Ensure alignment of security architecture with the organization’s business goals and IT strategy. 

• Evaluate and recommend new security technologies to enhance the organization’s security posture. 

Architecture Design and Implementation: 

• Lead the design and deployment of robust, scalable, and secure security solutions. 

• Ensure all security components adhere to enterprise architecture standards and best practices. 

• Oversee the integration of various security components within the enterprise architecture. 

Leadership and Collaboration: 

• Lead and mentor a team of security architects and engineers, fostering a collaborative and innovative environment. 

• Collaborate with IT leaders, business stakeholders, and external partners to ensure the successful delivery of security projects. 

• Provide expert guidance on security architecture to other teams within the organization. 

Governance and Compliance: 

• Establish and enforce policies, standards, and guidelines for security architecture. 

• Ensure compliance with regulatory requirements and internal policies for all security solutions. 

• Conduct regular reviews and audits of security architecture to ensure compliance and identify areas for improvement. 

Continuous Improvement: 

• Drive continuous improvement initiatives in security architecture, focusing on optimization and modernization. 

• Stay informed about the latest industry trends, tools, and technologies to keep the organization at the forefront of security architecture. 

• Implement best practices for security performance tuning and optimization. 

Qualifications: 

Education and Experience: 

• Bachelor’s or Master’s degree in Computer Science, Information Technology, Cybersecurity, or a related field. 

• 10+ years of experience in IT, with at least 5 years in a Senior Enterprise Security Architecture role. 

• Proven experience leading security architecture projects in large, complex and highly regulated environments. 

Technical Skills: 

• Deep understanding of security architecture principles, patterns, and best practices. 

• Experience with a variety of security technologies (e.g., firewalls, intrusion detection/prevention systems, encryption, identity and access management). 

• Proficiency in a multi-cloud security (e.g., AWS, Azure, Google Cloud) and related services. 

• Knowledge of secure software development and zero trust architecture, from design, code, build, deploy to run and operating software  

Leadership and Soft Skills: 

• Strong leadership skills with the ability to inspire and guide teams. 

• Excellent communication and interpersonal skills, with the ability to articulate complex technical concepts to non-technical stakeholders. 

• Strategic thinker with strong problem-solving and analytical skills. 

• Ability to manage multiple projects and priorities in a fast-paced environment. 

Preferred Qualifications: 

• TOGAF 9 Enterprise Architecture Practitioner certification as well as security and enterprise architecture frameworks (e.g., CISSP, CISM, TOGAF, Zachman). 

• Experience with DevSecOps practices and tools. 

• Knowledge of security and compliance standards relevant to various industries (e.g., GDPR, HIPAA, PCI-DSS). 

• Experience working within the financial services industry, ideally in an EA function within an investment management organization.