Enterprise Information Security Engineer/ Architect

Church Pension Group Services Corporation invites you to join as an Enterprise Information Security Engineer/Architect in New York, NY. This hybrid role offers a salary range of USD 120,000 to 155,000 per year and a comprehensive benefits package. You will design secure enterprise solutions and embed security across on premises, cloud hosted, SaaS, and vendor services while collaborating across teams to strengthen monitoring, incident response, compliance, and vendor management. The position emphasizes clear communication and cross-team partnerships, with opportunities for professional growth.

Benefits and Culture

We support your health, financial security, and ongoing development with a robust benefits program and a collaborative, professional culture focused on integrity and teamwork. The organization values clear communication, cross-functional collaboration, and continuous improvement in security practices across the technology landscape.

• Medical (including Vision)
• Dental
• Employer funded defined benefit pension plan (five year vesting)
• Employee Life Insurance
• Spouse and Dependent Life Insurance
• Accidental Death and Dismemberment Insurance
• Short-Term Disability (STD)
• Long-Term Disability (LTD) coverage (pre-tax or after-tax)
• Business Travel Accident Insurance
• Worker’s Compensation
• Employee Assistance Program
• Retiree health insurance (eligible after 10 years)
• Retiree life insurance
• 401(k) with matching contributions (immediate vesting)
• Flexible Spending Accounts (FSAs)
• Commuter Benefits
• New York’s 529 College Savings Program (NY State residents)
• Educational Assistance Program
• Parental Leave
• Time Off including Vacation, Sick, Personal and Holidays
• Discretionary annual incentive program

Hybrid work arrangement in New York requires in-office presence on Tuesdays through Thursdays, with flexibility to work remotely on Mondays and Fridays. The environment supports professional growth, compassionate collaboration, and trustworthy teamwork.

Responsibilities

• Architect Systems and Solutions: Plan and design security solutions that enable identification, protection, detection, response, and recovery from cyber threats; define and develop security requirements from threat assessments, risk modeling, system analysis, and regulations, leveraging standard security frameworks; create security integration plans for existing infrastructure and future solutions.
• Security Operations: Implement and manage security technologies (firewalls, encryption, SIEM, DLP, IPS); collaborate with other teams or MSSPs; monitor networks and systems for breaches, escalations, and anomalies; perform vulnerability assessments and penetration testing; manage security tool vendor relationships.
• Governance and Compliance: Develop and maintain security policies, standards, and procedures; ensure compliance with regulatory requirements; manage remediation and governance conversations; prepare action plans to harden systems and respond to security and disaster recovery events.
• Risk Management: Identify, evaluate, and report information security risks; conduct regular risk assessments and recommend mitigation strategies.
• Education and Awareness: Educate staff on cybersecurity best practices; develop or procure training to address identified gaps; advise business units on secure configurations, vendors, and architectures.
• Support Leadership: Assist the Enterprise Information Security Office in security event management, group collaboration, and planning and budgeting; maintain and develop technical and management skills.
• Other duties may be assigned; regular on-site collaboration is required to perform essential functions effectively.

Requirements

• Strong knowledge of cybersecurity principles, frameworks, and tools.
• Experience with a wide range of tools, including IDS, IPS, firewalls, and SIEMs.
• Deep understanding of Cloud Security and SaaS Vendor Security.
• Proficiency in risk assessment, incident response, and threat modeling.
• Excellent communication skills for cross-functional collaboration.

Technologies

• IDS, IPS, firewalls, encryption
• SIEM, DLP
• AWS, Azure, M365, Entra ID
• Splunk, CrowdStrike, Darktrace, Tripwire

Physical Demands

Extensive use of a computer keyboard is required to perform the essential functions of this job.

Work Environment

The position operates in a hybrid work setting with in-office Tuesdays through Thursdays in New York; Mondays and Fridays may be remote. The organization fosters a professional, compassionate, and trustworthy work environment, with reasonable accommodations available to enable success in the role.