CORPORATE SECURITY ARCHITECTURE MANAGER

Corporate Security Architecture Manager Our Company At FirstBank PR, we strive to be trusted advisors to our clients, and our employees are the ones that ensure we deliver on our promise of excellence in personalized customer service. Our more than 3,100 employees in Puerto Rico, the Virgin Islands and Florida share a passion for excellent customer service. We are proud of our team because they are continuously surpassing our client’s expectations. Do you have a passion for helping customers, building relationships, and delivering extraordinary, personalized customer service? If your answer is yes, FirstBank is the number one place for you. A Brief Overview The Corporate Security Architecture Manager leads the Corporation’s Security Architecture and Cloud Security function and is accountable for establishing the strategic security design, architecture principles, technical standards, and security-by-design practices that protect the Bank’s technology, applications, cloud services, data, and digital initiatives. The role provides independent architectural direction for Zero Trust, cloud and data security, DevSecOps governance, emerging technologies, and AI-driven threats while ensuring security requirements are integrated throughout the technology lifecycle. What you’ll do
· Establish and maintain the enterprise security architecture strategy, principles, reference architectures, roadmaps, patterns, and technical standards aligned with the Corporation’s business and technology strategies.
· Lead security architecture reviews for new systems, cloud services, digital products, infrastructure changes, integrations, and material technology initiatives.
· Define and govern Zero Trust architecture across identity, endpoints, networks, applications, data, infrastructure, and cloud environments.
· Establish cloud security architecture requirements for infrastructure, platforms, software services, workloads, containers, APIs, network connectivity, encryption, logging, resilience, and shared-responsibility models.
· Define data security architecture covering data classification, encryption, key management, tokenization, secrets management, data loss prevention, access controls, retention, and secure data flows.
· Establish secure software-development requirements, including threat modeling, code and dependency security, secrets protection, vulnerability testing, logging, and security gates.
· Assess emerging technologies and threats, including artificial intelligence, autonomous agents, cloud-native services, and machine identities, and recommend architecture requirements and mitigating controls.
· Develop, maintain, and approve security standards, design patterns, control requirements, and exception criteria in coordination with GRC and control owners.
· Provide architectural oversight for security capabilities and technologies to promote integration, interoperability, resilience, appropriate coverage, and strategic alignment.
· Review business cases, solution designs, requests for proposal, statements of work, and vendor architectures to identify security requirements, dependencies, residual risk, and required decisions.
· Partner with Cyber Defense to ensure architectures support monitoring, detection, response, vulnerability management, exposure management, and operational resilience.
· Partner with IAM Governance to ensure identity, authentication, privileged access, federation, and non-human identity requirements are embedded in solution designs.
· Support technical risk assessments, regulatory examinations, audits, penetration tests, and remediation programs by providing architecture analysis and sustainable control solutions.
· Present material architecture risks, design decisions, exceptions, roadmaps, and investment recommendations to the CISO, technology leaders, and governance committees.
· Lead and develop Security Architecture personnel, define accountabilities, protect capacity for strategic design, and maintain succession and capability-development plans. Additional Responsibilities
· Serve as the senior security architecture advisor during significant transformations, mergers, cloud migrations, technology modernization, and high-risk implementations.
· Maintain awareness of financial-sector threats, regulatory expectations, industry frameworks, and technology trends that may affect the Corporation’s architecture.
· Support incident investigations and root-cause analyses when architectural weaknesses or design decisions contribute to security events.
· Safeguard confidential architecture, security, customer, employee, and technology information.
· Perform other duties as assigned. What You’ll Need to Succeed
· Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related field. Master’s degree preferred.
· Seven or more years of information security, security architecture, cloud security, infrastructure architecture, application security, or related experience, including leadership responsibility.
· Demonstrated experience designing or governing enterprise security architecture, cloud controls, Zero Trust capabilities, and secure technology solutions.
· Experience supporting complex technology transformations and presenting security decisions to senior management.
· Experience in a financial institution or comparable regulated environment is strongly preferred.
· CISSP, CISM, CCSP, SABSA, TOGAF, Microsoft Cybersecurity Architect Expert, or a comparable certification is preferred. Competencies
· Deep knowledge of enterprise security architecture, cloud security, Zero Trust, network segmentation, identity architecture, data security, encryption, key management, application security, APIs, and DevSecOps.
· Strong understanding of security architecture across Azure and Microsoft 365 environments and familiarity with other cloud and hybrid platforms.
· Knowledge of AI security, machine identities, emerging-threat analysis, secure-by-design principles, and modern technology risk.
· Strong understanding of NIST CSF, NIST 800-53, NIST Zero Trust Architecture, ISO 27001, COBIT, CIS Controls, FFIEC, GLBA, PCI DSS, and applicable regulatory expectations.
· Ability to evaluate strategic tradeoffs, challenge designs constructively, define practical control requirements, and translate technical risk into clear business terms.
· Strong leadership, strategic planning, stakeholder management, negotiation, documentation, and executive-presentation skills.
· Clear written and verbal communication in English and Spanish. The above statements describe the general nature and level of work performed by individuals assigned to this position and are not intended to be an exhaustive list of all duties or responsibilities. EQUAL EMPLOYMENT OPPORTUNITY EMPLOYER