Job Description

TransUnion\'s Job Applicant Privacy Notice What We\'ll Bring: The Global Security Architecture Team is responsible for evolution and implementation of our global enterprise security strategy in partnership with technology leaders across TransUnion. We work with teams across the organization to:

1) Ensure that TransUnion security platforms and services are designed and implemented to deliver secure and scalable solutions that provide maximum value.
2) Consult, champion, and rationalize security architecture designs, policies, standards, and guidelines.
3) Advise Enterprise Architecture, BISOs, Business Units, and project teams on security requirements.
4) Support processes that allow TransUnion to evaluate, mitigate, and accept risk.
5) Advise and support security technology enablement activities for all cloud and on premise systems.

Global Security Architects will be responsible for connecting development and security audiences to the resources required to achieve scalable security and awareness. They will partner with architecture, engineering, and operations teams to consult on policy rationalization of defined control sets; consult on global secure architectural patterns; and assist in alignment between Risk, ISO, Policy and Engineering efforts to ensure successful and high value delivery of secure, scalable and compliant solutions. What You\'ll Bring: Basic Qualifications \xe2\x80\xa2 Experience in security architectures, risk management, and policy rationalization. \xe2\x80\xa2 Extensive experience leading the secure design and implementation of technologies in public cloud, private cloud and data center environments \xe2\x80\xa2 A broad knowledge base that spans across one or more security domains, such as: \xe2\x80\xa2 Application \xe2\x80\x93 understanding of common code quality tools and familiarity with CWEs \xe2\x80\xa2 Cloud \xe2\x80\x93 understanding of services, networking, and IAM privileges in one or more cloud providers \xe2\x80\xa2 Endpoint \xe2\x80\x93 experience with operating system hardening concepts and common protections \xe2\x80\xa2 Identity and Access Management \xe2\x80\x93 understanding of modern authentication and authorization processes and technologies applied to humans and processes, including Oauth 2.0, SAML, and MFA technologies \xe2\x80\xa2 Network \xe2\x80\x93 understanding of networking concepts, firewalls, proxies, monitoring, and the ability to create detailed network architecture diagrams \xe2\x80\xa2 Cryptography \xe2\x80\x93 understanding of data at rest and in transit encryption controls, appropriate algorithms, and requirements associated with frameworks such as NIST and FIPS \xe2\x80\xa2 Security Operations \xe2\x80\x93 familiarity or prior experience with monitoring, incident response, and threat hunting processes and technologies \xe2\x80\xa2 Outstanding communication and presentation skills. The ideal candidate is a security subject matter expert able to articulate complex, technical concepts to non-technical audiences. \xe2\x80\xa2 Demonstrated experience identifying and documenting security requirements for complex solutions and architectures aligned to commonly used frameworks such as NIST CSF, CIS Controls, and ISO 2700x. \xe2\x80\xa2 Evaluating, creating and updating architecture diagrams in common formats and tools such as Visio, Draw.io, Archimate, or BizzDesign. \xe2\x80\xa2 A consultative approach with proven expertise and ability to influence peers/external business leaders on security matters. Impact You\'ll Make: We\xe2\x80\x99d Love to See \xe2\x80\xa2 Familiarity with regulatory and best practice compliance requirements such as PCI-DSS and SOC2. \xe2\x80\xa2 Practical experience performing threat modeling exercises on infrastructure and application designs. \xe2\x80\xa2 Experience with concepts such as Zero Trust Architecture, DevSecOps, and Policy-as-Code. \xe2\x80\xa2 Experience working in and with Agile teams. \xe2\x80\xa2 Innate curiosity coupled with strong problem solving skills. \xe2\x80\xa2 Passion for security and a drive to understand designs and their inherent security challenges. TransUnion Job Title Architect, InfoSec Architecture