Solution Architect, Cyber Security

Job Type:

The Solution Architect, Cyber Security leads our cybersecurity strategy and ensures the protection of our digital assets and brand. This senior-level role focuses on building a robust cybersecurity framework using a risk-based approach. The role will guide decisions on investments, technology implementation, and prioritize security efforts to safeguard the company’s operations, while ensuring compliance with industry regulations.

Job Responsibilities

• Develop and implement a comprehensive IT/OT cybersecurity architecture that is defensible to protect critical on premise or cloud-based infrastructure and data.
• Lead the evaluation and selection of security tools, systems, controls, and practices based on risk assessments.
• Lead Technical Risk Assessments and Vendor Risk Assessment in providing qualitative and quantitative analysis.
• Provide expert guidance on cyber security risk management, categorizing areas of vulnerabilities into programmatic delivery verticals.
• Interpret and stay up-to-date on regulations impacting the midstream energy sector (e.g., FERC, NERC-CIP) and translate these into actionable activities to ensure compliance and security.
• Collaborate with other Solution Architect functions to ensure cybersecurity designs are pragmatic, efficient, and aligned with the company's overall business core strategy.
• Drive strategic investments in security technologies and initiatives by evaluating the return on security investment through a risk-focused lens.
• Prioritize cybersecurity projects and initiatives based on risk levels, impact, and resources available.
• Expert understanding of architectural technology hardening and emerging threats.
• Proven experience in M&A and architectural integration(s).

Knowledge, Skills, and Experience Required

• + 10 years proven experience in IT/OT cybersecurity architecture, risk management, and defense architecture strategy development within large or complex organization(s).
• Expert understanding of cybersecurity and architecture frameworks (NIST, ISO, FERC, IEC, TOGAF, etc.), risk management methodologies, including regulatory requirements in the midstream energy sector.
• Relevant industry certifications such as TOGAF, ISSAP, GDSA, GIAC GRID, and SAFe Architect are preferred Credentials.
• Deep knowledge of cloud security products as part of a cloud strategy.
• Excellent communication skills, with the ability to convey complex security concepts to both technical and business stakeholders.
• Expert knowledge of on-prem and cloud Directory Services, SSO, SAML, and MFA.
• Ability to effectively collaborate across teams and ensure cybersecurity initiatives align with overall business and technology goals.
• Perform security architecture design stage gate reviews and document the architectural topology for risk evaluation.
• Strong ability to navigate complexity under adverse situations and promote a unified approach to defensible architecture that meets business requirements.
• Government intelligence clearance or previous experience working in a secure, classified environment(s).
• undefined

Requirements:

• Cleared criminal history (background) and satisfactory reference checks
• Compliance with the Company’s drug and alcohol policy including pre-employment D&A testing.
• This position is not eligible for employment-based visa sponsorship. Applicants must be authorized to work in the U.S. for the duration of their employment

#Plains

At Plains, our employees are our most valuable asset. Hard work is rewarded with competitive compensation and a top-tier benefits program designed to keep our employees safe, healthy and happy. We work hard to deliver the best results to our stakeholders, and we also respect our employees' need for personal and family time, which is reflected in our benefits program.