Principal Information Security Architect

Who We Are:

United of States America

Open remote in USA. This position is not eligible for immigration or relocation assistance. 

Who We Are:

The Nature Conservancy’s mission is to protect the lands and waters upon which all life depends. As a science-based organization, we create innovative, on-the-ground solutions to our world’s toughest challenges so that we can create a world in which people and nature thrive. We’re rooted in our Mission and guided by our Values, which includes a Commitment to Diversity and Respect for People, Communities, and Cultures. Whether it’s career development, flexible schedules, or a rewarding mission, there’s lots of reasons to love life #insideTNC. Want a better insight to TNC? Check out our TNC Talent playlist on YouTube  or on Glassdoor.  

Our goal is to cultivate an inclusive work environment so that all our colleagues around the globe feel a sense of belonging, and that their unique contributions to our mission are valued. We know we’ll only achieve our Mission by hiring and engaging a diverse workforce that reflects the communities in which we work. In addition to the requirements in our postings, we recognize that people come with talent and experiences outside of a job. Diversity of experience and skills combined with passion is a key to innovation and a culture of inclusion! Please apply – we’d love to hear from you. To quote myriad TNC staff members, “you’ll join for our mission, and you’ll stay for our people.”

What We Can Achieve Together:

The Principal Information Security Architect is a member of the Information Security Risk Management Team and establishes, maintains, and facilitates the implementation of security standards, baselines, and security best practices within TNC’s information technology environment. A significant focus for the position will be on public cloud provider-related security standards and this role will work in close partnership with the Cloud Center of Excellence function to provide that expertise. This role will also work alongside the Enterprise Architecture function, IT Operations, and DevOps teams to design the security aspects of major IT systems and will conduct project-level security reviews, working closely with members of Information Security’s Red Team, to identify infrastructure security risks during system design and implementation and to recommend mitigations.   ​

We’re Looking for You:

• Experience creating, implementing, monitoring, enforcing, and refining security policies.
• Experience establishing and maintaining security baselines, patterns, and best practices with a varied set of technologies including server, application, networking, endpoint, and public cloud infrastructure.
• Experience in security testing and design review of application, networking, and cloud-based infrastructure.
• Experience with endpoint configuration management tools and endpoint baseline management.
• Ability to use an evidence-based approach to security design and risk management.
• Experience with using architectural diagraming concepts and tools.
• Understanding of information security risk management concepts.
• Understanding of core cloud solution components (e.g., service, compute, storage, and network) with a specialty in security, networking, and data access, and general knowledge of cloud developer capabilities.
• Knowledge of software and product development lifecycle practices.
• Ability to communicate complex concepts to a variety of audiences and build consensus on a path forward.

What You’ll Bring:

• Bachelor’s degree in a relevant technical discipline or equivalent years experience.
• 6 years’ experience as a business professional in IT or related field.
• Experience in analyzing, defining, and documenting complex systems requirements.
• Experience in communicating effectively with internal and external audiences.
• Experience with system life cycle and project management principles, best practices, and concepts.
• Experience configuring, operating, or auditing Public Cloud technology including AWS or Microsoft/Azure offerings for Infrastructure as a Service (IaaS), Platform as a Service (PaaS), or Software as a Service (SaaS).

BONUS

• Experience with security controls standards such as NIST 800-53, ISO 27001, Cloud Security Alliance Cloud Controls Matrix, Center for Internet Security Critical Security Controls.
• CI/CD software systems knowledge.
• Experience with Agile tools and concepts.
• Certifications such as GSEC, GDSA, Associate of (ISC)2, Microsoft MCA, AWS Certified Security – Specialty.

What We Bring:

Since 1951, The Nature Conservancy has been doing work you can believe in protecting the lands and waters that all life depends on. Through grassroots action, TNC has grown to become one of the most effective and wide-reaching environmental organizations in the world. Thanks to more than 1 million members, over 400 scientists, and the dedicated efforts of our diverse staff, we impact conservation throughout the world!

The Nature Conservancy offers a competitive, comprehensive benefits package including: health care benefits, flexible spending accounts, 401(k) plan including employer match, parental leave, accrued paid time off, life insurance, disability coverage, employee assistance program, other life and work wellbeing benefits. Learn more about our benefits at in the Culture Tab on nature.org/careers.

We’re proud to offer a work-environment that is supportive of the health, wellbeing, and flexibility needs of the people we employ!

Salary Information:

The starting pay range for a candidate selected for this position is generally within the range of $110,600-$165,900 for annual base salary. This range only applies to candidates whose country of employment is the USA. Where a successful candidate’s actual pay will fall within this range will be based on a variety of factors, including, for example, the candidate’s location, qualifications, specific skills, and experience. Please note countries outside the USA would have a different pay range in the local currency based on the local labor market, and not tied to USA pay or ranges. Your geographic location will be confirmed during the recruitment.