Cybersecurity Solutions Architect

Job Description Who We Are   Creative Artists Agency (CAA) is the leading entertainment and sports agency, with global   expertise   in filmed and live entertainment, digital media, publishing, sponsorship sales and endorsements, media finance, consumer investing, fashion, trademark licensing, and philanthropy. Distinguished by its culture of collaboration and exceptional client service, CAA’s diverse workforce   identifies , innovates, and amplifies opportunities for the people and organizations that shape culture and inspire the world. The trailblazer of the agency business, CAA was the first to build a sports business, create an investment bank, launch a venture fund, found technology start-up companies, establish a philanthropic arm, build a business in China, and form a brand marketing services division, among other innovations. Named Most Valuable Sports Agency by Forbes for eight consecutive years, CAA represents more than 2,000 of the world’s top athletes in football, baseball, basketball, hockey, soccer, in addition to coaches, on-air broadcasters, and sports personalities and works in the areas of broadcast rights, corporate marketing initiatives, social impact, and sports properties for sales and sponsorship opportunities. Founded in 1975, CAA is headquartered in Los Angeles, and has offices in New York, Nashville, Memphis, Chicago, Miami, London, Munich, Geneva, Stockholm, Shanghai, and Beijing, among other locations globally.   The Role Reporting to the   CAA Deputy CISO   this is a hands-on   solutions   architect   role   with a   focus on   cyber/information security ,   working within the Information   Risk Management   (IRM)   group and delivering   secure   technology   solutions to the company at large .   The role is critical in embedding security into CAA technology solutions that   are developed in-house or SaaS based.   The candidate will   collaborate across business,   technology,   and   other   functional   business   areas to   understand   requirements and workflows to develop and guide implementation of secure solutions to protect CAA   assets.     We are looking for candidates who   are self-driven and   proficient in   cybersecurity,   third-party   risk/security management, data   security   and general IT risk management   processes. The candidate will have experience as a   solutions   architect with a strong focus on integrating security through   the product/solution lifecycle.     The candidate will pla y a key role   in   our   teams’   efforts to build and support a defensible environment where we are able to detect, contain and respond quickly to   data security   threats and compromise in ways that serve to enable the business needs of a highly collaborative organization. The environment is fast-paced and commonly on the leading edge of technology, including early adoption of various cloud services along with the challenges of integrating those services into our security practices.   Responsibilities   Lead the solutions architecture function to ensure security is integrated early in the development lifecycle for in-house   applications   or   SaaS based solutions , infrastructure   projects   and technology processes.    Partner with business and technology teams to   identify   and document workflows, system architecture, data   flows   and   de velop   appropriate security   considerations.    Leverage Threat Model ing   techniques to   identify   security threats, vulnerabilities,   and attack vectors across the   solution   ( infrastructure, application, data ).   Ensure the security considerations   identified   are   implemented   and the solutions are configured   securely.    Develop secur e   patterns   for foundational technology solutions based on CAA   security standards   and continually e ducate   technology stakeholders on   the adoption of patterns.   Key focus on   security   integration s   includes   secure   access and authorizations,   audit logging,   secrets   management, data protection, data   security   and   other functional   third-party   integrations.    Support the SaaS/Third Party security assessments   and collaborat e   with service owners, business   leads   and   vendors to develop a managed solution aligned with CAA security policies.    Identify   risks and provide mitigating controls or risk treatment options for a given solution.    Develop training for   technology team members to increase   awareness   on security   practices for onboarding   new technology   solutions.    Required   Capabilities   Minimum   8   years of Information Security experience with a   B achelor’s   Degree .   Minimum 3   years experience   in a Security   Architect ure   function .   Create and review   system architecture diagrams in   Lucidchart   or equivalent tool.   Exper ience   in SaaS and Cloud architectures   –   Azure,   AWS,   M365,   and exposure to   SAP 4/HANA, Workday ,   Salesforce,   and other   SaaS   solutions.   Cloud architect ure   certifications preferred.    Experience with Cybersecurity frameworks – NIST CSF,   CSA Cloud Controls .   Cybersecurity certifications   CISM, CISSP   or equivalent work background   preferred.    Familiarity with   operational   tools such as JIRA,   ServiceNow,   OneTrust .   Experience with contractual and regulatory standards such as GDPR , CCPA , FINRA, TISAX ,   SOX .   Experience with third party   security   assessments   and standards – SOC, ISO27001, SIG .   Ability to communicate complex messages in a clear and concise manner   with stakeholders at all levels .   Excellent organizational skills and ability to communicate with internal/external entities and executives .   Effective le adership skills with   demonstrated   ability to coordinate people and teams to project/activity completion .   Ability to work in   team   environment sharing responsibilities .   Ability to work in