Sr. Data Security Architect

We’re looking for a Senior Data Security Architect, someone who’s ready to grow with our company. In this position, you will be responsible for ensuring the confidentiality, availability, and integrity of IDS information assets, enterprise databases, endpoints, cloud data repositories, AI models, and user AI workflows, protecting them from unauthorized disclosure, modification, endpoint tampering, data leakage, and destruction.

This position will develop and promote the Information Security Strategic Plan, Enterprise Data Security controls, Endpoint Security standards, and User AI Acceptable Use Policies, auditing compliance with Security Policies and leading remediation initiatives across endpoint, cloud, network, and AI infrastructure. Develops and maintains cybersecurity infrastructure, endpoint protection standards, Data Loss Prevention (DLP) frameworks, data classification schemes, and browser/AI agent audit controls. Participates in the IT Architecture Board and AI Governance Steering Group. Monitors organization and IS administrators' compliance to established Security policy. Quarterly vulnerability, data posture, endpoint posture, and AI risk reviews published to IS Management. Identify, track, and manage outstanding vulnerabilities across endpoints, network infrastructure, third-party AI tools, and data stores. Coordinate risk governance and remediation spanning IDS data repositories, endpoint telemetry, data exfiltration risks, model manipulation/prompt leakage, and compliance audit findings.

• Develop Security Policy, Data Protection & User AI Rules, and Provide Compliance Reporting.
• Develop, review, update, and communicate IDS policies related to information security, data classification, endpoint hygiene, data protection, user AI acceptable use, and agentic workflows.
• Develop security specification and certification methodology for all IDS systems, endpoint agents, security inspection tooling, enterprise applications, data pipelines, and AI integrations to assure systems are implemented according to zero-trust and data security policy standards.
• Develop a monitoring and compliance strategy (including proxy inspection, DLP enforcement, endpoint auditing, data access logging, and user AI activity tracking) to ensure security policies are followed.
• Conduct periodic inspections, data protection audits, and threat modeling of IDS computer systems, user endpoints, data repositories, and third-party AI tools to ensure compliance with security policies and procedures.
• Lead remediation of non-compliant systems, vulnerable endpoints, exposed data repositories, shadow IT, and shadow AI usage; resolve policy violations, data exfiltration alerts, endpoint posture risks, or prompt leakage to bring assets into compliance.
• Develop and promote risk assessment methodology for IDS network computer systems, endpoint populations, cloud data stores, and AI/ML data pipelines.
• Develop and promote data security incident mitigation workflows and coordinate team responses to data exposure risks, malware, endpoint compromises, policy violations, prompt injections, rogue agent behavior, and system intrusions.
• Publish a monthly data security and risk briefing for the Chief Information Security Officer.
• Develop Information, Endpoint, Data & AI Security Strategy. Coordinate security implementations across IS Disciplines, Endpoint Engineering, Data Engineering, and user departments.
• Architect, Implement, and Document Security Infrastructure (including firewalls, SASE, endpoint protection platforms/EDR, micro segmentation, inline proxy controls, data encryption frameworks, and AI security gateways). Established DRBCP architecture and solutions for core IT infrastructure, endpoints, and critical data pipelines.
• Advocate for security awareness, endpoint safety, data handling practices, data privacy governance, and safe user AI prompt usage. Manage complex customer interactions, evolving regulatory changes (including data privacy regulations and AI frameworks), and technology innovations appropriately.

Required:

• H.S. Diploma or GED
• 7 years: experience in information services (IS), computer management, or IS networking experience, including at least five (5) years of information security experience

Preferred:
• Bachelor’s degree in information security, Computer Science, Risk Management, or related field preferred.
• 12-15 years of experience in IT, information security, or risk management within a regulated industry preferred.
• Working knowledge of frameworks such as NIST CSF, NIST SP 800-53, HIPAA Security Rule, and state or accreditation-based security standards (e.g., Texas HHS, TDI, Joint Commission)
• Experience leading enterprise initiatives. Strong project management and presentation creation and delivery skills are highly desired.
• Excellent communication skills with the ability to translate technical details into business-relevant insights.

Preferred Licenses/Certifications:

• CISSP - Cert.Info.Sys Security Profes. ISC2
• SANS - SysAdmin, Audit, Network, Sec. SANS
• Security+ CompTIA
• CCSP Cert.Cloud.Sec.Profes. ISC2
• SSCP Sys.Sec.Cert.Profes. ISC2