Senior Security Architect

Fitch Group is currently seeking a Associate Director, Security Architecture based out of our Chicago office.

As a leading, global financial information services provider, Fitch Group delivers vital credit and risk insights, robust data, and dynamic tools to champion more efficient, transparent financial markets. With over 100 years of experience and colleagues in over 30 countries, Fitch Group’s culture of credibility, independence, and transparency is embedded throughout its structure, which includes Fitch Ratings, one of the world’s top three credit ratings agencies, and Fitch Solutions, a leading provider of insights, data and analytics. With dual headquarters in London and New York, Fitch Group is owned by Hearst.

Want to learn more about a career in technology and data at Fitch?

Visit:

We are looking for a Senior Security Architect to join our Information Security team. The successful candidate will be capable of taking on complex, multi-faceted security issues, and independently lead in correcting control posture.

How You’ll Make an Impact:

• Lead in tactical and strategic design and implementation of control sets for emerging technologies. Delegating action and keeping senior stakeholders aligned.
• Scope and own execution of assessments performed by third party consultants, ensuring remediation is adequately negotiated and ultimately enacted by other technology teams.
• Reviewing target architecture designs, ensuring any security risks are understood and documented. These changes include application updates, and modifications to network and identity provider configurations.
• Reviewing security policies, standards, procedures, and metrics, and participating in security monitoring use case design.
• Owning the continuous optimization of team workflows with the help of agentic technology and scrum tooling

You May be a Good Fit if:

• A minimum of 5 years of effective experience building and assessing enterprise systems.
• Deep conceptual understanding of AWS and Azure, and their identity platforms.
• Strong understanding of OAuth, OIDC, and modern access control. Fluidity in designing and reviewing authorization flows.
• Strong familiarity with adversary tradecraft, including identity and network perimeter attack primitives. Able to produce PoC attack sequences, for controls testing. Prior offensive security experience, or hands on offensive security certification strongly preferred.
• Ability to accurately, and pragmatically threat model business workflow, identifying the areas of control required, and documenting them.
• AI-first mindset; able to identify and act upon opportunities to automate analysis and administrative tasks, while improving the quality of assessment output.
• Effective communicator, both in writing and speaking.
• Strong organizational skills, with a proactive approach to enhancing team processes and tools.
• Strong scripting or automation skills (Python, Go, PowerShell).
• Understanding of security compliance frameworks (e.g., ISO 27001, NIST, SOC 2).

What Would Make You Stand Out:

• Experience with microservices and frameworks such as Spring-Boot.
• Good understanding of LLMs, Agentic AI and mainstream coding assistants like GitHub copilot and/or Amazon Q.
• Knowledge of emerging AI API standards like MCP and A2A.
• Demonstrated ability to quickly learn and adapt to new technologies, knock down impediments, and deliver great products in an agile environment.
• Ability to work with cross-functional teams towards a common goal.

Why Choose Fitch:

• Hybrid Work Environment: 2 to 3 days a week in office required based on your line of business and location
• A Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity
• Investing in Your Future: Retirement planning and tuition reimbursement programs that empower you to achieve your short and long-term goals
• Promoting Health & Wellbeing: Comprehensive healthcare offerings that enable physical, mental, financial, social, and occupational wellbeing
• Supportive Parenting Policies: Family-friendly policies, including a generous global parental leave plan, designed to help you balance career and family life effectively
• Inclusive Work Environment: A collaborative workplace where all voices are valued, with Employee Resource Groups that unite and empower our colleagues around the globe
• Dedication to Giving Back: Paid volunteer days, matched funding for donations and ample opportunities to volunteer in your community

Fitch is committed to providing global securities markets with objective, timely, independent and forward-looking credit opinions. To protect Fitch’s credibility and reputation, our employees must take every precaution to avoid conflicts of interest or any appearance of a conflict of interest. Should you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you, or your immediate family, have any holdings that may conflict with your work responsibilities, you may be asked to divest yourself of them before beginning work.

Fitch is proud to be an Equal Opportunity and Affirmative Action Employer. We evaluatequalified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law.

FOR CHICAGO ROLES ONLY: Expected base pay rates for the role will be between $160,000 and $175,000 per year. Actual salaries will be determined on an individualized basis and may vary based on factors including but not limited to education, training, experience, past performance, and other job-related factors. Base pay is one part of Fitch’s total compensation package, which, depending on the position, may also include commission earnings, discretionary bonuses, long-term incentives, and other benefits sponsored by Fitch.