Choosing Capgemini means choosing a company where you will be empowered to shape your career in the way you'd like, where you'll be supported and inspired by a collaborative community of colleagues around the world, and where you'll be able to reimagine what's possible. Join us and help the world's leading organizations unlock the value of technology and build a more sustainable, more inclusive world.
LocationChicago, IL (preferred) but can be Remote anywhere in the US
About The Job You're ConsideringThe person in this role will work with the Vice President of Information Security to develop a security program & prioritize security project that align with the company's strategic roadmap. This person will serve as the information security technical leader and ultimate escalation point for all other security team members, security incidents & requests. This position is expected to interface with staff in the Application and Infrastructure departments as well as with the leaders of the business units to design and implement the corporate security vision with those individuals and partner organizations.
As a Security Architect, you will lead the charge in fortifying our organization's security infrastructure. Your role encompasses designing and implementing robust security solutions tailored to our unique needs, ensuring that our systems, data, and networks remain resilient against potential threats. Collaborating closely with various stakeholders, you'll assess existing security frameworks, implement effective measures, and uphold stringent standards.
The individual will be a key member of the Architecture Review Board (ARB), helping ensure significant technology initiatives are evaluated for security, architecture, integration, operational impact, risk, and long-term supportability.
Your responsibilities extend beyond design, drive encompassing implementation and integration of security solutions into our existing infrastructure. You'll guide the implementation team to configure and deploy tools such as privileged identity management, secure cloud posture management, and secure application development technologies, AI controls, ensuring seamless integration while upholding rigorous security protocols.
Your RoleArchitectural Security Design:- Develop and maintain architectural security standards, guidelines, and best practices.
- Design secure, scalable, and resilient security architectures for various systems and applications.
- Identify, quantify, and provide design remediations for security risks as they relate to enterprise projects.
- Evaluate existing systems and propose enhancements to improve security posture.
- Partner with business members and IT leaders to drive security strategy and direction
- Produce management reporting, including appropriate metrics that inform senior leadership as to the state of information security risk and exposure
- Understands security product / service cost drivers and industry and business trends impacting client's information security program
- Provide information security matter expertise to technology teams and projects
- Ensure that the organization is leveraging the proper technologies to meet security related policies (including FTC, PCI)
- Ensure compliance with local regulations e.g. local encryption regulations and privacy law
Architecture Review Board : - Serve as a key technical member of the Architecture Review Board (ARB).
- Review significant technology initiatives and proposed architectural changes.
- Identify security concerns, dependencies, architectural impacts, operational considerations, and technical risks before implementation.
- Help teams evaluate alternative approaches and document architecture decisions.
- Improve the quality and consistency of technical information presented to the ARB.
- Help determine which initiatives require deeper security and architecture review. This aligns with prior internal discussion that Security should help evaluate projects against agreed standards and determine which should proceed through architecture review.
Security Solution Implementation:- Drive Implementation security solutions based on industry standards and organizational requirements.
- Guide team to configure and deploy security tools, such as cloud security governance and monitoring, firewalls, intrusion detection/prevention systems, endpoint protection, and encryption mechanisms.
- Collaborate with cross-functional teams to integrate security measures into new and existing systems.
- Recognizes and identifies potential areas where existing technical security polices standards and procedures require change, or where new ones need to be developed, especially regarding future business expansion
- Evaluate and recommend security software/hardware and its integration into existing architecture (Proof of Technology)
Your Skills And Experience- College degree in related technical / business areas and/or 10+ years equivalent work experience
- 3+ years experience as a security architect or consultant with enterprise experience.
- Excellent written and verbal communication skills, interpersonal and collaboration skills, and the ability to communicate security and risk-related concepts to technical and non-technical audiences.
- In depth knowledge of information security practices related to PCI, SOX, FTC, and OWASP application security.\
- Exhibit excellent analytical skills, the ability to manage multiple projects under strict timelines, as well as the ability to work well in a demanding, dynamic environment and meet overall objectives.
- Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), AWS or Azure Certifications as related to security and architecture, Certified Information Systems Auditor (CISA) or other similar credentials, is preferred.
- Knowledge of common information security management frameworks, such as ISO/IEC 27001, ITIL, COBIT and ones from NIST and CIS are preferred.
Technical Knowledge Areas:- Security Architecture Design: Ability to design secure, scalable, and resilient security architectures for various systems and applications including AI.
- Security Technologies: Proficiency in security tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), SIEM, endpoint protection, encryption mechanisms, etc.
- Network Security: Understanding of network security principles, protocols, and technologies (e.g., VPN, SSL/TLS, IPsec, DNSSEC, SASE) inclusive of Zero Trust architecture
- Cloud Security: Knowledge of cloud security principles and experience with securing cloud environments (e.g., AWS, Azure, Google Cloud Platform), including identity and access management (IAM), data encryption, and secure configuration.
- Application Security: Familiarity with secure coding practices, web application firewalls (WAF), secure development life cycle (SDLC), and vulnerability assessment tools.
- Operating Systems: Proficiency in securing various operating systems, including Windows, Linux, and Unix.
- Encryption: Understanding of cryptographic principles and protocols, such as symmetric/asymmetric encryption, digital signatures, SSL/TLS, and PKI.
- Compliance: Knowledge of regulatory requirements and industry standards (e.g., GDPR, HIPAA, PCI DSS) and experience in ensuring compliance with security regulations.
- Data Governance: Data Loss Prevention, File Integrity Monitoring, SEIM, Data scanning and tagging, Microsoft AIP
The base compensation range for this role in the posted location is:
$110,880 - $180,400Capgemini provides compensation range information in accordance with applicable national, state, provincial, and local pay transparency laws. The base compensation range listed for this position reflects the minimum and maximum target compensation Capgemini, in good faith, believes it may pay for the role at the time of this posting. This range may be subject to change as permitted by law.
The actual compensation offered to any candidate may fall outside of the posted range and will be determined based on multiple factors legally permitted in the applicable jurisdiction.
These may include, but are not limited to: Geographic location, Education and qualifications, Certifications and licenses, Relevant experience and skills, Seniority and performance, Market and business consideration, Internal pay equity.
It is not typical for candidates to be hired at or near the top of the posted compensation range.
In addition to base salary, this role may be eligible for additional compensation such as variable incentives, bonuses, or commissions, depending on the position and applicable laws.
Capgemini offers a comprehensive, non-negotiable benefits package to all regular, full-time employees. In the U.S. and Canada, available benefits are determined by local policy and eligibility and may include:
- Paid time off based on employee grade (A-F), defined by policy: Vacation: 12-25 days, depending on grade, Company paid holidays, Personal Days, Sick Leave
- Medical, dental, and vision coverage (or provincial healthcare coordination in Canada)
- Retirement savings plans (e.g., 401(k) in the U.S., RRSP in Canada)
- Life and disability insurance
- Employee assistance programs
- Other benefits as provided by local policy and eligibility
Important Notice: Compensation (including bonuses, commissions, or other forms of incentive pay) is not considered earned, vested, or payable until it becomes due under the terms of applicable plans or agreements and is subject to Capgemini's discretion, consistent with applicable laws. The Company reserves the right to amend or withdraw compensation programs at any time, within the limits of applicable legislation.
DisclaimersCapgemini is an Equal Opportunity Employer encouraging inclusion in the workplace. Capgemini also participates in the Partnership Accreditation in Indigenous Relations (PAIR) program which supports meaningful engagement with Indigenous communities across Canada by promoting fairness, accessibility, inclusion and respect. We value the rich cultural heritage and contributions of Indigenous Peoples and actively work to create a welcoming and respectful environment. All qualified applicants will receive consideration for employment without regard to race, national origin, gender identity/expression, age, religion, disability, sexual orientation, genetics, veteran status, marital status or any other characteristic protected by law.
This is a general description of the Duties, Responsibilities and Qualifications required for this position. Physical, mental, sensory or environmental demands may be referenced in an attempt to communicate the manner in which this position traditionally is performed. Whenever necessary to provide individuals with disabilities an equal employment opportunity, Capgemini will consider reasonable accommodations that might involve varying job requirements and/or changing the way this job is performed, provided that such accommodation does not pose an undue hardship. Capgemini is committed to providing reasonable accommodation during our recruitment process. If you need assistance or accommodation, please reach out to your recruiting contact.
Please be aware that Capgemini may capture your image (video or screenshot) during the interview process and that image may be used for verification, including during the hiring and onboarding process.
Click the following link for more information on your rights as an Applicant in the United States. ;br>
Capgemini is a global business and technology transformation partner, helping organizations to accelerate their dual transition to a digital and sustainable world, while creating tangible impact for enterprises and society. It is a responsible and diverse group of 340,000 team members in more than 50 countries. With its strong over 55-year heritage, Capgemini is trusted by its clients to unlock the value of technology to address the entire breadth of their business needs. It delivers end-to-end services and solutions leveraging strengths from strategy and design to engineering, all fueled by its market leading capabilities in AI, generative AI, cloud and data, combined with its deep industry expertise and partner ecosystem.
