Senior Security Architect @ First Hawaiian Bank

First Hawaiian Bank is currently seeking a Senior Security Architect to join the team in our Security Architecture & Operations Department.

Work Schedule

Monday - Friday 8:00AM - 5:00PM (hours may vary)

Compensation

The pay range for the role is $113,500 - $150,000/yr; commensurate with experience.

The Senior Security Architect is responsible for advancing the Bank’s enterprise security architecture strategy and ensuring the secure design, integration, and operation of technology solutions across hybrid environments, including on-premises infrastructure, cloud platforms (IaaS, SaaS, PaaS), and AI/ML and generative AI technologies. This role serves as a key contributor to the Security Architecture & Operations function by providing strategic security guidance, architectural oversight, and risk-based recommendations that enable secure business innovation and regulatory compliance.

Working closely with business leaders, technology teams, enterprise architects, and project stakeholders, the Senior Security Architect drives the adoption of secure technology solutions aligned with the Bank’s information security strategy, risk appetite, and regulatory requirements. This role also supports the development and execution of the Bank’s cloud security, AI security, and emerging technology security programs.

Essential Position Accountabilities

• Leads and provides material contributions to the design and implementation of secure enterprise architectures supporting new hybrid on premises, cloud, and AI/ML technology initiatives. Collaborates with business and technology stakeholders to develop security architectures, network and system designs, process flows, resource planning, budgets, and implementation roadmaps. Ensures solutions adhere to established security standards, architecture principles, and regulatory requirements while identifying opportunities to enhance and mature security controls and frameworks.
• Evaluates current and emerging technology architectures to identify security risks, control gaps, and opportunities for improvement. Recommends strategic enhancements that strengthen the Bank’s security posture and operational resilience. Contributes to the development and maintenance of the information security technology roadmap, including cloud security, identity and access management, data protection, infrastructure security, and AI security capabilities.
• Performs security architecture reviews of proposed technology initiatives and infrastructure changes through the Bank’s established governance and change management processes. Assesses the security implications of planned changes, provides risk-based recommendations, and ensures alignment with enterprise architecture standards, security policies, and industry best practices.
• Maintains a thorough understanding of applicable regulatory, legal, and industry security requirements affecting the Bank. Ensures that required security controls are incorporated into architecture reviews, solution assessments, and strategic recommendations. Partners with risk, compliance, audit, and technology teams to support ongoing compliance initiatives that strengthen the Bank’s control environment.
• Partners with enterprise architecture, infrastructure, application development, and business leadership teams to ensure alignment between information security strategy and broader technology objectives. Participates in strategic technology planning discussions and governance forums, providing expert guidance on security implications, emerging threats, and evolving technology trends, including risk associated with AI/ML and generative AI adoption.
• Serves as a trusted advisor and subject matter expert on security architecture matters. Provides guidance to technical teams, project stakeholders, and security personnel regarding security design principles, risk management practices, and security requirements. Promotes security-by-design principles and supports the secure adoption of cloud-based and AI-enabled technologies through the organization.
• Defines, implements, and maintains security architecture standards and control frameworks supporting AI/ML and generative AI technologies. Provides oversight for the secure design and operation of machine learning platforms, model development, large language model (LLM) integrations, and third-party AI services across the Bank’s hybrid technology environment. Identifies and assesses AI-specific threats, vulnerabilities, and risks and establishes appropriate security controls, governance standards, and monitoring practices to support responsible AI adoption.

Minimum Experience Requirements (Officer)

• Two (2) years of experience with Cloud Infrastructure with AWS preferred (GCP, Azure and/or OCI is acceptable)
• Five (5) years of experience in IT infrastructure architecture (cloud, routing, switching, WAN/LAN, virtualization, systems engineering, scripting, etc.); and
• Five (5) years of experience in security engineering and security architecting inclusive of:
• Demonstrated experience engineering and architecting complex IT infrastructure solutions.
• Demonstrated experience managing and implementing cybersecurity frameworks and concepts operationally.
• Demonstrated experience security or architecting AI/ML and generative AI systems (e.g. model pipelines, LLM integrations, MCP, third party model usage.

Minimum Experience Requirements (AVP)

• Four (4) years of experience with Cloud Infrastructure with AWS preferred (GCP, Azure and/or OCI is acceptable)
• Five (5) years of experience in IT infrastructure architecture (cloud, routing, switching, WAN/LAN, virtualization, systems engineering, scripting, etc.);
• Ten (10) years of experience in security engineering and security architecting inclusive of:
• Demonstrated experience engineering and architecting complex IT infrastructure solutions.
• Demonstrated experience managing and implementing cybersecurity frameworks and concepts operationally.
• Demonstrated experience security or architecting AI/ML and generative AI systems (e.g. model pipelines, LLM integrations, MCP, third party model usage.

*Required experience may be obtained concurrently.

All candidates

• Bachelor’s degree in information security, computer science, information systems, cybersecurity, engineering, related discipline; or a combination of education and experience required.
• Preferred Security and Technical Certifications: Cloud security certifications (AWS, GCP, Azure), SSCP, Security+, GSEC, Microsoft Certified Systems Engineer (MCSE), Certified Information System Security Professional (CISSP), Cisco Certified Network Professional (CCNP), Cisco Certified Security Professional (CCSP) and/or other related Cybersecurity or AI/ML security certifications.
• Excellent verbal, written, presentation, and interpersonal communication skills, with the ability to effectively communicate complex technical concepts to executive, business, and technical audiences.
• Strong strategic thinking, analytical, and problem-solving skills, with the ability to assess complex risks and develop practical, risk-based solutions.
• Ability to influence decisions and build consensus across business, technology, security, risk, compliance, and executive leadership teams.
• Demonstrated project planning, organizational, and prioritization skills, with the ability to manage multiple initiatives and meet deadlines with minimal supervision.
• Ability to develop and present architectural recommendations, risk assessments, and security strategies to governance committees and senior leadership.
• Sound judgment and discretion in handling confidential, sensitive, and proprietary information.
• Ability to work effectively both independently and collaboratively in a team-oriented environment.
• Strong knowledge of security governance, risk management, compliance requirements, and security-by-design principles.
• Ability to mentor, coach, and provide technical leadership to security professionals and project teams.
• Flexibility to support critical incidents, technology implementations, and business needs outside normal business hours when required.