CS Enterprise Architect

CS Enterprise Architect Entergy Corporation - 3.7 New Orleans, LA Job Details 1 day ago Qualifications Penetration testing Endpoint Security COSO Certified Information Systems Auditor System administration Azure Computer Science COBIT Salesforce Writing skills Engineering iOS Regulatory compliance

CISSP HIPAA UNIX FISMA

Information Systems SOX Windows Security assessment Master's degree CISM Information security compliance AWS Policy & process development Bachelor's degree in engineering Solution architecture design Bachelor's degree IT security architecture NIST standards

ITIL OSCP

Perl Risk management Mentoring Implementing APIs

ISO 27002

Vulnerability management IT SIEM Identity and access management (IAM) solutions Senior level Bachelor's degree in cybersecurity Bachelor's degree in computer science Process management Python PowerShell Cloud services Time management Identity & access management 10 years

Full Job Description Job Title:

CS Enterprise Architect Work Place Flexibility:

Hybrid Legal Entity:

Entergy Services, Inc.-ESI (OLD) •This is a hybrid position that can be filled in The Woodlands, TX, Little Rock, AR, Jackson, MS and New Orleans, LA. Sponsorship and Relocation Assistance is not provided.•Job Summary The Enterprise Security Architect utilizes their knowledge, experience, and creativity in order to translate the Information Security strategy and roadmap into services, processes, and solutions that meet Entergy's business objectives. The Enterprise Security Architect focuses on specific functional areas and partners with key stakeholders to develop service, process, and solution roadmaps, reference architectures, and standards. The Enterprise Security Architect is not afraid to propose or support big ideas, but understands the complexity, sensitivity, and regulatory landscape of an integrated energy company. The Enterprise Security Architect is able to effectively push back when necessary while maintaining a voice of the customer perspective. The Enterprise Security Architect acts as a mentor to other Information Security and IT colleagues. Key Responsibilities Develop Information Security reference architectures for existing and emerging technologies Work with other Domain Architects and the Enterprise Architecture team to ensure alignment of the Security architecture with the overall Enterprise architecture Develop policies, procedures, standards, processes, and templates that are consistent with the Information Security strategy and roadmap Participate in security and non-security projects to ensure that security requirements are defined and implemented Lead and/or perform assessments and threat modeling of existing and emerging technologies to ensure they meet Entergy security and compliance requirements Evangelize and advocate for information security with stakeholders Integrate information security into core IT processes through development of security services catalog and the creation of security processes and controls Develop effective and efficient ways to measure and monitor the security posture of the functional area Monitor emerging trends in Information Security and technology and make or suggest changes to Entergy's security posture as necessary Partner with Internal Audit, CSO, Compliance, regulators, and others as necessary to maintain a unified approach to information security Experience Ten or more years of architecture or engineering experience across multiple information security or IT/OT disciplines (detection and response, network security, application security, endpoint security, Identity and Access Management, vulnerability management, system administration, networking, application development, risk management, etc.) Three or more years of cyber security architecture experience One or more years in a complex and highly-regulated industry (e.g., utilities, financial services, healthcare, etc.) Experience working with outsourced teams Organizational and time management skills Experience in working in partnership with colleagues throughout the enterprise KSA Familiarity with technologies commonly utilized within an enterprise IT and OT environment Strong knowledge of multiple information security domains and subject matter expertise in at least one o Operating systems (•nix, Windows, IOS, etc.) o Networking and network security o APIs o Secure coding/application security o Vulnerability Management o SIEM o Identity and Access Management o Penetration testing o Cloud services (AWS, Azure, Salesforce, etc.) o Scripting (Python, PowerShell, Perl, etc.) o Security process and control development o Endpoint protection technology o OT systems and protocols o Smart Grid technology Some knowledge of IT Security regulations and guidance such as

NIST, FISMA & ISO27001

Familiarity with The Open Group Architecture Framework (TOGAF), Open Web Application Security Project (OWASP), Open Security Architecture, National Institute of Standards and Technology (NIST) Cloud Computing Reference Architecture, or other architecture frameworks Able to be hands-on with technical engineering and process management skills and the ability to advocate positive transformation within the broader information technology organization Able to design & develop reference architectures Able to design and develop an API based services layer for consistent integration with the security systems Knowledge of security ramifications of energy related regulations (SOX, HIPAA, NERC CIP, FERC, and NRC Nuclear Cyber (10 CFR 73.54) Knowledge of security, risk, and control frameworks and standards such as ISO 27001 and 27002, SANS-CAG, NIST, FISMA, COBIT, COSO and ITIL Strong writing and analytic ability Strong ability to concisely and effectively communicate across the enterprise Available to travel Self-motivated, with the ability to manage and follow up on multiple tasks simultaneously Capable of meeting deadlines Education Bachelor's degree in computer science, cyber security, information systems, engineering or a related discipline or equivalent work experience. Master's degree preferred. Certification ISACA or ISC2 certification, such as

CISSP, CISM, CISA

preferred OSCP preferred Relevant vendor credentials offered by companies such as Symantec, Checkpoint, Cisco, Microsoft, etc. preferred #LI-DG1 #

LI-HYBRID

Primary Location:

Louisiana-New Orleans Louisiana :

New Orleans ||

Arkansas :

Little Rock ||

Mississippi :

Jackson ||

Texas :

Woodlands Job Function :

Professional FLSA Status :

Professional Relocation Option:

Union description/code :

NON BARGAINING UNIT

Number of Openings :

1

Req ID:

123273

Travel Percentage :

Up to 25% An Equal Opportunity Employer, Minority/Female/Disability/Vets.

EEO Statement:

The Entergy System of Companies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a protected veteran in accordance with applicable federal, state and local laws. The Entergy System of Companies complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment including, but not limited to, recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. The Entergy System of Companies expressly prohibits any form of unlawful employee harassment based on race, color, religion, sex, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of the Entergy System of Company employees to perform their expected job duties is absolutely not tolerated.

Accessibility:

Entergy provides reasonable accommodations for online applicants. Requests for a reasonable accommodation may be made orally or in writing by an applicant, employee, or third party on his or her behalf. If you are an individual with a disability and you are in need of an accommodation for the recruiting process please provide your name, contact number, the accommodation requested and the requisition number that you are requesting the accommodation for. Employee Services will contact you regarding your request.

Additional Responsibilities:

As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Know Your Rights:

Workplace Discrimination is Illegal The non-confidential portions of the affirmative action program for individuals with disabilities and protected veterans shall be available for inspection upon request by any employee or applicant for employment. Please contact to schedule a time to review the affirmative action plan during regular office hours.

WORKING CONDITIONS

As a provider of essential services, Entergy expects its employees to be available to work additional hours, to work in alternate locations, and/or to perform additional duties in connection with storms, outages, emergencies, or other situations as deemed necessary by the company. Exempt employees may not be paid overtime associated with such duties.

Please note:

Authorization to work in the United States is a precondition to employment in this position. Entergy will not sponsor candidates for work visas for this position.