About NCRVOYIX NCR VOYIX Corporation (NYSE: VYX) is a leading global provider of digital commerce solutions for the retail, restaurant and banking industries. NCR VOYIX is headquartered in Atlanta, Georgia, with approximately 16,000 employees in 35 countries across the globe. For nearly 140 years, we have been the global leader in consumer transaction technologies, turning everyday consumer interactions into meaningful moments. Today, NCR VOYIX transforms the stores, restaurants and digital banking experiences with cloud-based, platform-led SaaS and services capabilities. Not only are we the leader in the market segments we serve and the technology we deliver, but we create exceptional consumer experiences in partnership with the world's leading retailers, restaurants and financial institutions. We leverage our expertise, R&D capabilities and unique platform to help navigate, simplify and run our customers' technology systems. Our customers are at the center of everything we do. Our mission is to enable stores, restaurants and financial institutions to exceed their goals - from customer satisfaction to revenue growth, to operational excellence, to reduced costs and profit growth. Our solutions empower our customers to succeed in today's competitive landscape. Our unique perspective brings innovative, industry-leading tech to all the moving parts of business across industries. NCR VOYIX has earned the trust of businesses large and small - from the best-known brands around the world to your local favorite around the corner. Job Title: Software Security Architect Department: Software Engineering At NCRVoyix we are a leader in providing innovative solutions that empower Convenience, Fuel, Retail (CFR) organizations to excel in a secure environment. We are committed to ensuring that security is embedded into every layer of our enterprise architecture. As a Software Security Architect, you will play a pivotal role in shaping the security architecture that protects our mission-critical systems and business processes. Join us to lead and develop best-in-class security solutions that meet stringent cybersecurity and compliance requirements. Position Overview: The Software Security Architect will be responsible for integrating security into all aspects of the enterprise architecture, ensuring that security requirements are addressed from design through implementation. You will work closely with stakeholders to develop cybersecurity designs that meet the organization's security objectives, ensuring compliance with industry standards and multilevel security requirements. The role involves assessing and evolving the current security posture, identifying risks, and defining secure configurations for both on-premise and cloud systems. Key Responsibilities:
- Cybersecurity Architecture Development: Develop and integrate secure systems and network designs, specifically focusing on environments that handle data across multiple classification levels.
- Collaborate with internal teams to ensure that security is addressed at every phase of the acquisition and system development lifecycle.
- Security Governance: Document and address the organization's information security, cybersecurity architecture, and system security engineering requirements, ensuring alignment with reference models, segment architectures, and system designs.
- Risk Assessment & Threat Modeling: Perform security reviews and risk assessments, identifying gaps in security architecture and developing risk management plans. Prioritize critical business functions and align security measures accordingly.
- Secure Configuration Management: Implement secure configuration management processes, ensuring that all systems align with organizational security standards and that security controls are applied consistently.
- Collaboration & Leadership: Serve as a liaison between enterprise architects and system security engineers, ensuring that security controls are properly allocated across system-specific, hybrid, or common controls. Lead security initiatives across teams to ensure organizational alignment.
- Security Reviews & Incident Response: Evaluate security architectures in response to new systems and system integrations. Conduct security reviews and define how new interfaces and systems impact the current security environment.
- Compliance & Regulatory Requirements: Ensure compliance with regulatory standards such as PCI SSF and industry-specific requirements. Continuously monitor for updates in security regulations and best practices.
Core Tasks:
- Develop/integrate cybersecurity designs for systems with multilevel security requirements.
- Document and address cybersecurity architecture throughout the acquisition lifecycle, ensuring compliance with security requirements.
- Employ secure configuration management processes to maintain the integrity of systems and data.
- Ensure that systems align with organizational cybersecurity architecture guidelines and best practices.
- Perform security reviews, develop risk management plans, and identify gaps in security architecture.
- Define and document the impact of new systems or interfaces on the security posture of the current environment.
Core Competencies:
- Client Relationship Management: Foster strong relationships with internal and external stakeholders to advocate for security requirements.
- Computer Network Defense: Protect against unauthorized access to networks and systems through proactive defense strategies.
- Enterprise Architecture: Expertise in integrating security into IT architecture and aligning with business objectives.
- Risk Management: Identify, assess, and mitigate risks associated with security vulnerabilities.
- Systems Integration: Ensure seamless integration of security components into existing and new systems across the enterprise.
Core Knowledge:
- Knowledge of business continuity and disaster recovery concepts (K0026), including how to maintain operations during adverse conditions.
- Strong understanding of secure configuration management and the role of security in enterprise architecture.
- Ability to design secure frameworks, considering factors such as resilience, reliability, and the impact of changes in the operational environment.
- Knowledge of industry-standard security analysis principles, microprocessors, encryption techniques, and firewall concepts.
- Deep understanding of program protection planning, especially related to IT supply chain risk management and anti-tampering techniques.
- Familiarity with remote access technologies, human-computer interaction principles, and communication methods that support the network infrastructure.
Basic Qualifications: - Educational Background: Bachelor's or Master's degree in Computer Science, Information Security, Cybersecurity, or a related field.
- 7+ years of experience in software security, with at least 5 years as a security architect in complex environments.
- Proven track record in developing secure architectures for multilevel classification systems and regulated industries.
- Hands-on experience with cloud platforms (AWS, Azure, GCP) and security services.
- Proficiency in security tools (e.g., SAST, DAST, IDS/IPS) and secure coding practices.
Preferred Qualifications: - Certifications: Certifications such as Certified Information Systems Security Professional (CISSP), Certified Secure Software Lifecycle Professional (CSSLP), or CISA are highly desirable.
- Experience working in industries with stringent security requirements, such as government, healthcare, or financial services.
- Familiarity with Zero Trust security architectures and modern security frameworks such as NIST and ISO 27001.
- Knowledge of machine learning or AI security practices is a plus.
Why Join Us?
- Lead security initiatives in a fast-paced, innovation-driven environment.
- Competitive compensation package with performance-based incentives.
- Comprehensive benefits, including health, dental, and vision coverage
- Opportunities for continuous learning and professional growth.
Offers of employment are conditional upon passage of screening criteria applicable to the job
EEO Statement Integrated into our shared values is NCR Voyix's commitment to diversity and equal employment opportunity. All qualified applicants will receive consideration for employment without regard to sex, age, race, color, creed, religion, national origin, disability, sexual orientation, gender identity, veteran status, military service, genetic information, or any other characteristic or conduct protected by law. NCR Voyix is committed to being a globally inclusive company where all people are treated fairly, recognized for their individuality, promoted based on performance and encouraged to strive to reach their full potential. We believe in understanding and respecting differences among all people. Every individual at NCR Voyix has an ongoing responsibility to respect and support a globally diverse environment.
Statement to Third Party Agencies To ALL recruitment agencies: NCR Voyix only accepts resumes from agencies on the preferred supplier list. Please do not forward resumes to our applicant tracking system, NCR Voyix employees, or any NCR Voyix facility. NCR Voyix is not responsible for any fees or charges associated with unsolicited resumes When applying for a job, please make sure to only open emails that you will receive during your application process that come from a @ncrvoyix.com email domain.