About this role
The Data Security Architect supports Texas Children's Third-Party Risk Management (TPRM) program by assessing the cybersecurity risks of third-party vendors, applications, cloud-hosted and SaaS solutions, artificial intelligence, and emerging technologies. This role manages the risk assessment lifecycle from intake through closure, evaluates vendor security architecture, data flows, and documentation against Texas Children's policies, standards, and regulatory requirements, and validates controls and attestations.
The Data Security Architect documents and communicates risks, control gaps, and recommended mitigations in ServiceNow GRC, partners with business owners, vendors, and technical teams, and supports exception management, risk acceptance, process improvement, and audit activities to help protect patient and organizational data.
Required:
- H.S. Diploma or GED
- 5 years of experience in information services (IS), computer management, or IS networking experience, including at least three (3) years of information security experience.
Preferred:
- Experience in information security, cybersecurity risk assessments, third-party risk management, or Governance, Risk & Compliance (GRC).
- Knowledge of cybersecurity frameworks and regulatory requirements, including NIST, ISO 27001, HIPAA, HITRUST, and PCI DSS.
- Ability to interpret SOC 2 reports, security certifications, technical architecture diagrams, and vendor security documentation.
- Understanding of cloud security, identity and access management, encryption, vulnerability management, and data protection principles.
- Familiarity with ServiceNow GRC or comparable risk management platforms.
- Strong analytical, problem-solving, communication, documentation, and stakeholder management skills.
- Experience in healthcare or another highly regulated industry preferred.
- Relevant professional certifications such as CRISC, CISM, CISSP, CISA, or Security+