{"id":3762612,"url":"https://alion.io/job/hh-global-information-security-architect","title":"Information Security Architect","company":{"id":1936717,"name":"HH Global","domain":"hhglobal.com","url":"https://alion.io/company/hhglobal","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":{"grade":"A","score":88,"open_postings":4,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bogotá, Colombia","Mexico City, Mexico"],"countries":["CO","MX"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DLP","optional":false},{"name":"Google Workspace","optional":false},{"name":"ISO 27001","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false},{"name":"Microsoft Sentinel","optional":true},{"name":"Qualys Cloud Platform","optional":true}],"status":"live","first_seen_at":"2026-11-04T11:00:00Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-06T14:38:42Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Purpose of Role \nThe Information Security Architect is a senior technical role responsible for leading the design and delivery of security solutions across the organisation’s infrastructure and technology programmes. This individual will serve as a subject matter expert on complex security infrastructure projects, providing architecture and design guidance to ensure that all solutions are secure by design and aligned to the organisation’s risk appetite and strategic security vision.\nThe role has two primary pillars of responsibility. First, the Architect will drive solution designs for strategic security infrastructure initiatives, including but not limited to Zero Trust Network Access (ZTNA), Privileged Identity and Access Management (PIM/PAM), Passwordless Authentication, Network Segmentation, Data Loss Prevention (DLP), Cloud Access Security Broker (CASB) technologies and implementing best practices for Vulnerability Management and Threat Detection capabilities. Second, the Architect will act as an Information Security Review (ISR) resource, assisting with IT project reviews and risk assessments to ensure appropriate security controls are embedded throughout the project lifecycle.\nThe successful candidate will bring strong technical depth across security architecture domains, the ability to communicate complex security concepts to both technical and non-technical stakeholders, and a pragmatic approach to balancing security requirements with business objectives.\nThis role sits with the Security Operations function of the Information, Security and Risk department to ensure all controls are operationally effective, integrated into detection tooling, and optimised for real-world threat response. \nKey Responsibilities \nSecurity Architecture & Solution Design \nLead the security architecture and solution design for strategic security infrastructure projects, including ZTNA, PIM/PAM, Passwordless Authentication, Network Segmentation, DLP, and CASB implementations, with a SOC-Centric approach at the forefront. \nDefine, maintain security architecture and governance controls for cloud, data, and AI platforms, including CSPM, DSPM, and AI DSPM capabilities, ensuring the protection of sensitive information and compliance with organisational and regulatory requirements.\nEnsure logging and telemetry is captured and maintained into SIEM solutions and aligned with SOC requirements. \nArchitect Microsoft Stack security controls, including Defender XDR ecosystems and Entra ID security architecture are designed and optimised. \nArchitect security controls and standards on other supported platforms, including AWS and Google Workspace. \nEvaluate, recommend, and set security baselines for new and existing security technologies, ensuring alignment with industry best practice and organisational requirements. \nLead the secure adoption and governance of Artificial Intelligence (AI) and Generative AI technologies across the organisation and ensure AI platforms comply with information security, data protection, privacy, intellectual property, and regulatory requirements. \nProduce high-quality security architecture documentation including solution designs, architecture decision records (ADRs), and technical standards. \nCollaborate with IT, infrastructure, and engineering teams to translate security requirements into practical and deliverable technical solutions. \nProvide expert guidance on cloud security architecture (Azure / Microsoft 365 ecosystem) including identity, network, data, and application security controls. \nIT Project ISR Review & Risk Assessment \nAct as the Information Security Review (ISR) representative for IT projects, assessing proposed solutions, designs, and changes for security risk and compliance. \nConduct structured security risk assessments of IT projects and solution designs, identifying threats, vulnerabilities, and gaps against security standards and policies. \nConduct security and privacy assessments of AI services, including data handling, model usage, third-party risk, and integration controls. \nProvide clear and actionable risk-based recommendations to project teams and stakeholders, enabling informed decision-making and risk ownership. \nReview and approve IT changes and solution designs, applying security-conscious principles and ensuring residual risks are understood and accepted appropriately. \nMaintain an ISR register and track the status of security recommendations, exceptions, and risk acceptances across the project portfolio. \nWork collaboratively with the ISR team to ensure consistent application of the security review process across all IT projects. \nGovernance, Risk & Compliance \nContribute to the development and maintenance of information security policies, standards, and procedures, particularly those relating to architecture, design, and technology controls. \nSupport the ongoing maintenance of the ISO 27001:2022 ISMS and SOC 2 Type 2, ensuring Architectural controls are documented and evidenced appropriately. \nAssist with security risk assessments, gap analyses, and the management of remediation actions arising from audit findings or control deficiencies. \nStakeholder Engagement & Collaboration \nAct as a trusted security adviser to IT leadership, project managers, and technical teams, providing pragmatic and commercially aware security guidance. \nRepresent the Information Security function in architecture review boards, project steering groups, and technical design authorities. \nLiaise with third-party vendors and managed service providers to evaluate security capabilities and ensure contractual security obligations are met. \nCommunicate security architecture decisions and risk positions clearly to both technical and non-technical audiences, including senior stakeholders.\nKnowledge Requirements \nEssential \nDemonstrable experience in information security architecture, with a strong track record of delivering complex security infrastructure projects from design through to implementation. \nDeep technical expertise across two or more of the following domains: ZTNA, PIM/PAM, Passwordless Authentication, Network Segmentation, DLP, and CASB. \nStrong knowledge of Microsoft security technologies, including Microsoft Entra ID (Azure AD), Microsoft Defender suite, Microsoft Purview (DLP/CASB), and Azure networking security controls \nStrong understanding of Data Security Posture Management (DSPM), Cloud Security Posture Management (CSPM) and AI Security and Governance \nExperience conducting security risk assessments and ISR reviews for IT projects, with the ability to produce clear risk-rated findings and recommendations. \nSound knowledge of identity and access management principles, including privileged access workflows, just-in-time access, and zero trust identity architectures. \nKnowledge of network security architecture, including firewall policy design, micro segmentation, east-west traffic controls, and secure remote access patterns. \nFamiliarity with ISO 27001:2022, SOC 2 Type 2 and other relevant frameworks (e.g. NIST CSF, CIS Controls). \nFluent in English language with excellent written and verbal communication skills, with the ability to produce high-quality architecture documentation and present complex topics clearly to diverse audiences. \n5+ years information / cyber security experience, with 2+ years architecture experience \nDesirable \nRelevant professional certifications such as CISSP, CISM, SABSA, TOGAF, Microsoft Security certifications (e.g. SC-100 Cybersecurity Architect Expert), or equivalent. \nExperience working within a global enterprise environment, navigating complex stakeholder landscapes and multi-region security requirements. \nFamiliarity with cloud security posture management (CSPM) and cloud workload protection platforms (CWPP). \nExperience with security automation and infrastructure-as-code approaches to security control deployment. \nKnowledge of Microsoft Sentinel and their integration into broader detection and response architectures. \nKnowledge of Qualys VMDR and WAS for vulnerability and web application management and detection. \nKnowledge of Netskope SASE (Secure Access Service Edge) solution to combine networking and security services into a single architecture, enabling secure access to web, cloud, and private applications. \n\n#LI-NM1#LI-Hybrid","description_format":"text","description_chars":8341,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Colombia","iso":"CO","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Packaging & Labeling","Digital Marketing"],"lifecycle":[{"event":"open","at":"2026-11-04T19:04:28Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":35,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/hh-global-information-security-architect","json_url":"https://alion.io/job/hh-global-information-security-architect.json","meta":{"generated_at":"2026-11-06T14:54:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":27706,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1936717},"rest":"https://alion.io/mcp/rest/get_company?id=1936717"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhh-global-information-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhh-global-information-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhh-global-information-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hh-global-information-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhh-global-information-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3762612}},{"tool":"search_jobs","arguments":{"company":"hhglobal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3762612},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}