The role of Security Architect Manager within Enterprise Security leads a team of approximately 5 highly skilled security architects and defines architecturally relevant work products such as patterns and roadmaps that enable sound security controls to protect AEP. The security architect manager is expected to have an expert level understanding of controls that can be leveraged within technical IT and OT architectures. This position will manage and lead other Security Architects to provide direction through defined architectural work products and guidance on security policies, standards and regulatory requirements as they relate to all business units and internal use of information and technology. This position requires expert communication, problem-solving, management, and leadership skills to work across teams at AEP. It also requires a deep understanding of security frameworks and standards, with a particular emphasis on the NIST cybersecurity framework and NERC CIP standards.
Job Description
What You'll Do:
-
Manage and lead other Security Architects to identify, measure, control and minimize security risks to information, business, and security systems across a broad range of disciplines including application, infrastructure, network and host security. Key security architecture focuses may include Identity and Access Management (IAM), Vulnerability Management, Threat Intelligence (including security logging and monitoring and others), Cloud and AI.
-
Create patterns that can be use by Security partners to protect information and availability of AEP systems. These patterns can be used in both infrastructure and application architecture.
-
Manage others to architect a repeatable and layered approach to Security working with internal and external partners to ensure that systems are placed within the relevant security zones based upon established security environments across all of AEP based upon the data they house and their purpose.
-
Lead and mentor the security architecture team to ensure that all newly developed and legacy applications, systems, and infrastructure implementations are in line with security policy and meet regulatory compliance.
-
Mentor and partner with other architects on how to advise, enforce, and approve changes and architectures for assigned areas from a security perspective. Ensure architects are equipped on how to well articulate and illustrate security controls within IT and OT architecture and solutions.
-
Review and approve the development of architectural reference materials to ensure that security practices are implemented and enforced in a repeatable fashion every time a new project is implemented.
-
Manage and guide others on high level risks and security issues that could impact the confidentiality, integrity and/or availability of the business (both internally and externally) by assisting in documentation, tracking and creating expert solutions for mitigation.
-
Guide the design of Security architecture strategies to align to business requirements and provide leadership guidance on new technology implementations for applications, infrastructure, mobility, network, and cloud-based solutions. Ensure AEP is aware of new solutions available in industry to ensure sound security solutions and continually improve our offerings to meet business requirements and mitigate risks within the threat landscape.
What We're Looking For:
Education:
-
Bachelor's degree or Associate degree combined with a minimum of 2 years of applicable business/technical experience in Security (Cyber and/or Physical), Business Administration, Computer Science, or related field
-
OR a HS diploma/GED combined with a minimum of 4 years of applicable business/technical experience preferably in Security (Cyber and/or Physical), Business Administration, Computer Science, or related field.
Experience: 10 or more years of Security (Physical and/or Cyber), business administration, computer science, or other technical experience, demonstrating steady progression in responsibilities including 4 or more years of direct supervision experience preferred (in addition to any experience identified above).
Nice to Have:
-
Licenses/Certifications: CISSP, CISSP-ISSAP (Information Systems Security Architecture Professional) or other Security certification strongly preferred (CISM, MCSE, CISA, etc.)
American Electric Power
1 Riverside Plaza
Columbus
Ohio United States
www.aep.com
