Develop, document, and maintain the Information Security target reference architecture and patterns. Provide Information Security assessments and evaluate controls. Collaborate with IT and other areas to ensure necessary controls are in place.