{"id":3800243,"url":"https://alion.io/job/texas-childrens-hospital-data-security-architect","title":"Data Security Architect","company":{"id":43568,"name":"Texas Children's Hospital","domain":"texaschildrens.org","url":"https://alion.io/company/texas-children-s","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":85,"open_postings":22,"ghost_share":0,"stale_share":0.818,"repost_share":0,"time_to_fill_p50_days":20,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Houston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"ServiceNow","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-11-05T06:00:00Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-11T09:49:31Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"The Data Security Architect supports Texas Children's Third-Party Risk Management (TPRM) program by assessing the cybersecurity risks of third-party vendors, applications, cloud-hosted and SaaS solutions, artificial intelligence, and emerging technologies. This role manages the risk assessment lifecycle from intake through closure, evaluates vendor security architecture, data flows, and documentation against Texas Children's policies, standards, and regulatory requirements, and validates controls and attestations.\nThe Data Security Architect documents and communicates risks, control gaps, and recommended mitigations in ServiceNow GRC, partners with business owners, vendors, and technical teams, and supports exception management, risk acceptance, process improvement, and audit activities to help protect patient and organizational data.\n Conduct cybersecurity risk assessments and reassessments of third-party vendors, applications, and technology solutions.\nManage the third-party risk assessment lifecycle, including intake reviews, documentation requests, risk evaluation, reporting, and assessment closure.\nReview and evaluate vendor security documentation, including SOC 2 reports, ISO 27001 certifications, HITRUST assessments, security white papers, and architecture diagrams.\nEvaluate vendor security architecture, data flows, system integrations, and third-party access to identify potential cybersecurity risks.\nAssess security risks associated with cloud-hosted solutions, SaaS applications, artificial intelligence, and emerging technologies.\nEvaluate security controls against Texas Children's information security policies, standards, and applicable regulatory requirements.\nIdentify, document, and communicate cybersecurity risks, control deficiencies, and recommended risk mitigation measures.\nPerform risk validation activities, review control attestations, and coordinate with responsible stakeholders to address outstanding security requirements.\nMaintain accurate risk assessment records, findings, control evidence, and supporting documentation within ServiceNow GRC.\nCollaborate with business owners, vendors, project managers, and technical teams to gather security information, clarify requirements, and communicate assessment findings.\nMonitor assessment progress, outstanding documentation, and risk validation activities to support timely completion within established service-level expectations.\nIdentify material changes to existing vendor solutions that may require additional risk assessments or reassessments.\nSupport security exception management, risk acceptance processes, and documentation of identified control gaps.\nAssist in developing and improving TPRM policies, procedures, assessment methodologies, reporting metrics, and operational processes.\nSupport internal and external audit activities by providing third-party risk assessment records and supporting evidence.\n Required:\nH.S. Diploma or GED\n5 years of experience in information services (IS), computer management, or IS networking experience, including at least three (3) years of information security experience.\nPreferred:\nExperience in information security, cybersecurity risk assessments, third-party risk management, or Governance, Risk & Compliance (GRC).\nKnowledge of cybersecurity frameworks and regulatory requirements, including NIST, ISO 27001, HIPAA, HITRUST, and PCI DSS.\nAbility to interpret SOC 2 reports, security certifications, technical architecture diagrams, and vendor security documentation.\nUnderstanding of cloud security, identity and access management, encryption, vulnerability management, and data protection principles.\nFamiliarity with ServiceNow GRC or comparable risk management platforms.\nStrong analytical, problem-solving, communication, documentation, and stakeholder management skills.\nExperience in healthcare or another highly regulated industry preferred.\nRelevant professional certifications such as CRISC, CISM, CISSP, CISA, or Security+","description_format":"text","description_chars":3988,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Hospitals & Health Systems","Information Security","Women’s Health & Maternity","Pediatric Care"],"lifecycle":[{"event":"open","at":"2026-11-05T11:06:09Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 13 · green card filings: 2","filings_12m":13,"filings_prev_12m":11,"green_card_filings_12m":2,"median_offered_wage_usd":89167,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":2}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":5,"expected_fill_days":20,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/texas-childrens-hospital-data-security-architect","json_url":"https://alion.io/job/texas-childrens-hospital-data-security-architect.json","meta":{"generated_at":"2026-11-11T15:04:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28019,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":43568},"rest":"https://alion.io/mcp/rest/get_company?id=43568"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftexas-childrens-hospital-data-security-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftexas-childrens-hospital-data-security-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftexas-childrens-hospital-data-security-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/texas-childrens-hospital-data-security-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftexas-childrens-hospital-data-security-architect"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3800243}},{"tool":"search_jobs","arguments":{"company":"texaschildrens.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3800243},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}