Enterprise Cybersecurity Architect

Job not on LinkedIn

🔥 15 hours ago

🤠 Texas – Remote

🤠 Texas – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

PAM Health

WebsiteLinkedInAll Job Openings

5001 - 10000 employees

🏥 Healthcare

👥 B2C

Healthcare • B2C

PAM Health is a U. S. -based post-acute care provider operating 70+ hospitals and clinics that specialize in inpatient rehabilitation, long-term acute care (LTACH), outpatient rehabilitation, hospice, home health, and behavioral health. The organization provides a range of clinical programs and therapies—physical, occupational and speech therapy, comprehensive wound and amputation care, hyperbaric oxygen therapy, exoskeleton-assisted rehab, and specialized brain and spinal cord injury programs—focused on recovery, clinical excellence, and patient-centered care for complex medical and rehabilitative needs.

📋 Description

• Develop, maintain, and govern PAM Health’s enterprise security architecture, technical security standards, design patterns, and reference architectures • Review enterprise, cloud, clinical, network, application, data, artificial intelligence, and medical device initiatives for security requirements • Conduct threat modeling and security design reviews for systems, major changes, integrations, and third-party solutions • Define security requirements and architecture guardrails aligned with NIST, HIPAA, MITRE ATT&CK, OWASP, and applicable regulations • Identify architectural risks, document controls, recommend remediation, and communicate technical and clinical impact • Establish secure cloud, identity, network, endpoint, application, data protection, logging, monitoring, and incident response design standards • Partner with IT, Network Operations, Clinical Informatics, Compliance, Privacy, Legal, and business leaders • Provide technical direction and oversight to managed security service providers, vendors, consultants, and third parties • Support application security through secure development requirements, architecture reviews, vulnerability management, penetration testing, and remediation guidance • Evaluate AI and machine learning systems for data protection, access control, model risk, dependencies, and misuse scenarios • Assess medical devices and connected clinical technologies for cybersecurity risk and recommend compensating controls • Support security incidents with architecture analysis, containment guidance, root-cause review, and recurrence-prevention recommendations • Maintain knowledge of emerging threats, security technologies, healthcare cybersecurity requirements, and industry practices • Mentor security and IT staff and promote consistent security standards across the enterprise • Coach, evaluate, develop, and inspire staff; set expectations and recognize achievements • Promote customer service, confidentiality, safety, OSHA training, universal precautions, and emergency procedures • Support significant security incidents outside standard business hours when required

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, Information Systems, or a related technical field, or an equivalent combination of education and experience • Certified Information Systems Security Professional (CISSP) must be obtained within six (6) months of hire and maintained in good standing • Ten (10) years of progressive experience in cybersecurity • Seven (7) years of cybersecurity experience in healthcare, including provider, health system, or comparably regulated clinical environments • Five (5) years in a security architecture or senior technical role • Three (3) years of application security experience • Experience providing technical direction to third-party security providers and managed security service providers • Demonstrated expertise with the OWASP Top 10 and secure development practices • Working knowledge of MITRE ATT&CK, the NIST Cybersecurity Framework, and the HIPAA Security Rule • Ability to translate technical risk into business and clinical impact for executive and clinical audiences • Strong written and verbal communication skills • Ability to produce highly technical architectural documentation and present complex concepts to non-technical executive leadership • Facility access, screening, and health requirements may apply during clinical facility visits • Preferred: Master’s degree in Computer Science, Cybersecurity, or a related technical field • Preferred certifications: GDSA, SABSA, CCSP, OSCP, GPEN, or HCISPP • Preferred experience with medical and connected clinical device security, penetration testing, red team operations, adversarial design review, AI/ML security, HITRUST, SOC 2 Type II, ISO 27001, 42 CFR Part 2, PCI DSS, FDA software-as-a-medical-device requirements, and geographically distributed clinical environments • Familiarity with OWASP Top 10 for Large Language Model Applications, NIST AI Risk Management Framework, and MITRE ATLAS preferred • Cloud security architecture experience across multiple cloud service providers preferred

🏖️ Benefits

• Remote work arrangement • Travel reimbursement or support for travel to facilities across the enterprise (not explicitly stated as a benefit) • Professional development through professional organizations and/or continuing education • Employee Health requirements and OSHA-required training • Opportunity to mentor and develop security and information technology staff