Director, Information Security Architecture and Solutions (Remote) - WashU IT

Scheduled Hours 40 Position Summary The Director of Information Security Architecture and Solutions leads a security architecture and consulting team and is responsible for defining and advancing the institution’s security architecture strategy, providing expert security consulting across clinical care, academic, research, and administrative units, and ensuring that security solutions are effective, scalable, and aligned with institutional goals. The Director collaborates closely with the Chief Information Security Officer (CISO) and stakeholders across Information Security, Information Technology (IT), and the broader university. This position includes strategic planning, people leadership, and hands-on architectural and solutions consulting work. Job Description Primary Duties & Responsibilities: Leadership and Strategy Define and maintain the enterprise security architecture vision and roadmap in alignment with university strategy, IT standards, and clinical care, research, and teaching missions. Lead the Security Architecture and Solutions team, including recruiting, mentoring, performance management, and professional development. Contribute to information security program strategy and planning with the CISO and other security leaders. Security Architecture and Design Develop and maintain security reference architectures, patterns, and design standards for on-premises, cloud, and hybrid environments. Partner with the CTO’s infrastructure teams to ensure secure design and integration of core services (firewall, VPN, EDR, SIEM, IAM, networks, and platforms). Review and approve security designs for major technology initiatives, research platforms, and third-party services. Security Consulting and Engagement Provide expert security consulting to IT, research, and business units on new systems, applications, and services. Facilitate design workshops and threat modeling to identify and address security risks early in project lifecycles. Communicate complex security concepts clearly to technical and non-technical stakeholders. Risk Assessment and Control Implementation Support the GRC team in developing new security risk assessment methods for emerging technologies and new business cases. Perform deep technical assessments for custom applications and system configurations. Recommend security controls and enhancements to reduce risk while enabling innovation and usability. Standards, Policies, and Continuous Improvement Contribute to the development and enforcement of security architecture standards, guidelines, and patterns. Monitor the effectiveness of implemented security controls and recommend improvements. Stay current with emerging threats, technologies, and best practices to inform architecture decisions. Perform other related duties as assigned. Working Conditions: Job Location/Working Conditions Normal office environment Ability to travel to various on- and off-campus locations Physical Effort Typically sitting at desk or table Equipment Office equipment The above statements are intended to describe the general nature and level of work performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all job duties performed by the personnel so classified. Management reserves the right to revise or amend duties at any time. Required Qualifications Education: Bachelor’s degree or combination of education and/or experience may substitute for minimum education. Certifications/Professional Licenses: No specific certification/professional license is required for this position. Work Experience: Relevant Information Technology, Including Managing Information Security Teams (7 Years) Skills: Not Applicable Driver's License: A driver's license is not required for this position. More About This Job WashU seeks highly motivated individuals who are able to perform duties in a manner consistent with our core mission and guiding principles. Preferred Qualifications Education: Master's degree Certifications/Professional Licenses: Certified Information Security Manager (CISM) - Information Systems Audit and Control Association (ISACA), Certified Information Systems Architecture Professional" (CISAP) - International Information System Security Certification Consortium (ISC2), Certified Information Systems Auditor (CISA) - Information Systems Audit and Control Association (ISACA), Certified Information Systems Security Professional (CISSP) - International Information System Security Certification Consortium (ISC2) Work Experience: No additional work experience unless stated elsewhere in the job posting. Skills: Analytical Problem Solving, Coaching, Cybersecurity, Employee Development, Employee Management, Goal-Oriented, Goal Setting, Information Technology (IT), Information Technology Security, Interpersonal Communication, Oral Communications, Problem Solving, Project Administration, Technical Projects, Written Communication Grade G17 Salary Range $110,300.00 - $194,200.00 / Annually The salary range reflects base salaries paid for positions in a given job grade across the University. Individual rates within the range will be determined by factors including one's qualifications and performance, equity with others in the department, market rates for positions within the same grade and department budget. Questions For frequently asked questions about the application process, please refer to our External Applicant FAQ. Accommodation If you are unable to use our online application system and would like an accommodation, please email [email protected] or call the dedicated accommodation inquiry number at 314-935-1149 and leave a voicemail with the nature of your request. All qualified individuals must be able to perform the essential functions of the position satisfactorily and, if requested, reasonable accommodations will be made to enable employees with disabilities to perform the essential functions of their job, absent undue hardship. Pre-Employment Screening All external candidates receiving an offer for employment will be required to submit to pre-employment screening for this position. The screenings will include criminal background check and, as applicable for the position, other background checks, drug screen, an employment and education or licensure/certification verification, physical examination, certain vaccinations and/or governmental registry checks. All offers are contingent upon successful completion of required screening. Benefits Statement Personal Up to 22 days of vacation, 10 recognized holidays, and sick time. Competitive health insurance packages with priority appointments and lower copays/coinsurance. Take advantage of our free Metro transit U-Pass for eligible employees. WashU provides eligible employees with a defined contribution (403(b)) Retirement Savings Plan, which combines employee contributions and university contributions starting at 7%. Wellness Wellness challenges, annual health screenings, mental health resources, mindfulness programs and courses, employee assistance program (EAP), financial resources, access to dietitians, and more! Family We offer 4 weeks of caregiver leave to bond with your new child. Family care resources are also available for your continued childcare needs. Need adult care? We’ve got you covered. WashU covers the cost of tuition for you and your family, including dependent undergraduate-level college tuition up to 100% at WashU and 40% elsewhere after seven years with us. For policies, detailed benefits, and eligibility, please visit: https://hr.wustl.edu/benefits/ EEO Statement Washington University in St. Louis is committed to the principles and practices of equal employment opportunity. It is the University’s policy to provide equal opportunity and access to persons in all job titles without regard to race, ethnicity, color, national origin, citizenship (where prohibited by federal law), age, religion, sex, sexual orientation, gender identity or expression, disability, protected veteran status, or genetic information. Q: Can I create a job alert to notify me when jobs of interest are posted? A: Yes! After you create a Candidate Home account, you can set up and manage job alerts to be sent to you either daily or weekly, according to the filters you select. You can add, edit, or delete job alerts at any time. You will need to opt in to communications from WashU when you set up your first alert and will only receive alerts for jobs posted after the alert has been created. Set alerts today so you do not miss any new opportunities! Washington University in St. Louis' collective success is significantly attributed to the passion and outstanding efforts of our community. Our staff, faculty and trainees are committed to excellence and dedicated to carrying out our missions of research, teaching and patient care. WashU prides itself on being a place where people matter, and serious work is done. Our people work together in an inclusive community that celebrates diverse perspectives, collaboration and innovation. We are a community of individuals inspired to work together to develop big ideas and tackle challenging problems. We value the well-being of our people. WashU strives to create a positive employee experience where staff, faculty and trainees thrive, both personally and professionally. Our employees find meaning, connection and vitality in their work and life with a healthy work-life balance and support to learn, grow and make an impact at WashU, the community and the world. Useful Links Who We Are Human Resources Benefits Living in St. Louis Frequently Asked Questions Accommodation If you are unable to use our online application system and would like an accommodation, please email [email protected] or call the dedicated accommodation inquiry number at 314-935-1149 and leave a voicemail with the nature of your request. Regulatory Postings Know Your Rights: Workplace Discrimination is Illegal Poster (English; Spanish)