Senior Cyber Security Resiliency Architect

Senior Cyber Security Resiliency Architect

Location: Larkin Bldg @ Exchange Street
Location of Job: US:NY:Buffalo
Work Type: Full-Time
Shift 1

Job Description

The Senior Cyber Security Resiliency Architect is responsible for designing, governing, and continuously improving the enterprise technology resilience architecture for Kaleida Health. The role integrates cybersecurity, disaster recovery (DR), business continuity (BC), cyber recovery, and operational resilience requirements to ensure that critical clinical, patient-care, administrative, and infrastructure services can withstand and recover from cyberattacks, technology failures, natural disasters, third-party disruptions, and other material events. The Architect serves as a senior technical and governance advisor across Information Security, Infrastructure, Cloud, Applications, Clinical Engineering, Enterprise Architecture, Emergency Management, Compliance, Privacy, and business operations. Particular emphasis is placed on ransomware resilience, identity and infrastructure recovery, immutable and isolated backups, clean-room recovery, recovery sequencing, dependency mapping, and validation that recovery capabilities meet defined recovery time objectives (RTOs), recovery point objectives (RPOs), and patient-safety requirements.

Education And Credentials

Associate's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Business Continuity, or a related discipline; equivalent combination of education and significant relevant experience may be considered required. Bachelor's degree in ybersecurity, Information Technology, Computer Science, Engineering, Business Continuity, or a related discipline; equivalent combination of education and significant relevant experience may be considered preferred.

Experience

Five to ten years of experience in information technology, cybersecurity, infrastructure, enterprise architecture, disaster recovery, business continuity, or operational resilience, including significant responsibility for complex enterprise recovery environments required. Demonstrated experience designing or operating DR and cyber recovery capabilities for large, highly available, regulated environments required. Strong knowledge of backup and recovery architectures, replication, virtualization, cloud recovery, identity recovery, network resilience, storage, databases, and application dependencies required. Experience with ransomware recovery, immutable/isolated backup strategies, recovery clean rooms, or cyber recovery vault concepts required. Experience developing and executing DR tests, cyber recovery exercises, tabletop exercises, failover/failback activities, and restoration validation required. Working knowledge of healthcare operations and the criticality of EHR, clinical, revenue cycle, diagnostic, pharmacy, communications, identity, and supporting infrastructure services preferred. Ability to develop architecture diagrams, technical standards, recovery strategies, executive presentations, risk assessments, and audit-ready evidence required. Strong communication and facilitation skills with the ability to translate complex technical risks into patient-care, operational, financial, regulatory, and business impacts required. Experience in a hospital, integrated delivery network, health system, health plan, or other healthcare environment preferred. Experience with hybrid infrastructure spanning on-premises data centers and major cloud platforms preferred. Experience with enterprise EHR/clinical ecosystems and complex healthcare integration dependencies preferred. Knowledge of NIST SP 800-34 contingency planning concepts, NIST CSF recovery/resilience outcomes, NIST SP 800-53 contingency planning controls, HIPAA Security Rule contingency planning requirements, and healthcare-sector cybersecurity practices preferred. Experience with resilience or DR orchestration platforms, configuration management databases (CMDBs), dependency mapping, GRC platforms, and enterprise backup/recovery technologies preferred.

Working Conditions

Job Details

Department: KH Cyber Security
Standard Hours Bi-Weekly: 75.00
Weekend/Holiday Requirement: Yes
On Call Required: Yes
With Rotation: Yes
Scheduled Work Hours: 8:00am - 5:00pm
Work Arrangement: Hybrid
Union Code: N00 - Non Union KH
Requisition ID#: 26692
Grade:  EX218
Pay Frequency: Bi-Weekly
Salary Range: $114,338.25  - $157,212.41

*Wage will be determined based on factors such as candidate's experience, qualifications, internal equity, and any applicable collective bargaining agreement. 

Kaleida Health’s mission is to advance the health of our community, and we believe our diversity, equity, and inclusion (DEI) strategic work is mission- critical for the good of our workforce and the community who need and depend on our care and services. We understand that racism and health inequities stand firmly in the way of advancing the health of our community, and Kaleida Health envisions DEI as the pursuit of equity and restorative justice for every person. We will exemplify courage and accountability through both the professing and practice of our core values for our friends, colleagues, and community. Kaleida Health is committed to creating a culture of equity and inclusion where diversity is valued and celebrated!