Sr Manager, Security Engineering & Architecture

Description

• Partners with enterprise security & governance teams to assess and reduce cloud security risks
• Develop and maintain security architecture artifacts (models, patterns, templates, and standards) that can be used to leverage security capabilities in projects and operations.
• Champions the implementation of industry leading security standards and best practices across the enterprise.
• Develop and implement security solutions and capabilities that are clearly aligned with business, technology, and threat drivers.
• Participate in security assessments of existing and prospective vendors, especially those with which the organization shares confidential, restricted, regulated or other protected data.
• Collaborates with enterprise and domain architects to develop secure solutions.
• Conduct vulnerability assessments and other security reviews of systems, and prioritize remediation based on the risk profile of the assets
• Provides advice, analysis, and recommendation on security products in the security space.
• Support the testing and validation of internal security controls.
• Coordinate with operational and facility-management teams to assess the security of operational technology.
• Collaborate with the governance and sourcing team to develop security strategy and roadmaps based on sound enterprise architecture practices.
• Coordinate with DevOps teams to advocate secure coding practices and escalate concerns related to poor coding practices.
• Collaborate with SOC teams to define and enforce security standards.
• Develop standards and practices for data encryption and tokenization within the organization based on the organization's data classification criteria.

Requirements

• Proven experience leading and mentoring security engineering teams, with a track record of developing talent and building high-performing functions.
• Experience with other cloud service providers such as AWS or Azure across SPI (e.g. SaaS, PaaS, IaaS) models and environments (Public, Private, Hybrid)
• In-depth understanding of cloud cybersecurity standards, frameworks and best practices.
• At least 5 years of experience designing, architecting and securing IaaS, Pass, and SaaS cloud deployments.
• An ability to communicate complex and technical issues to diverse audiences, orally and in writing, in an easily understood, authoritative, and actionable manner.
• Bachelor’s or Master’s degree in Computer Science or a related discipline.
• At least 8 years of experience in the security aspects relating to multiple platforms, operating systems, software, communications, and network protocols, or an equivalent combination of education and work experience.
• Provides clear written and verbal consulting on projects about security architecture and risk management.
• Skilled in talent development, mentorship, and empathetic performance management.
• Prior experience creating and executing enterprise-wide strategic security engineering plans that align with business and technology goals.
• Certifications should include CCSP, CISSP, CCSK, and other cloud vendor specific certifications.
• Willingness to innovate and take calculated risks, enabling teams to explore new techniques for impactful change.
• Progressive information security experience across various information security / information technology risk management domains such as but not limited to network security, endpoint security, application security, infrastructure security, identity and access management, vulnerability and cyber threat management, security architecture.
• Exceptional communication and interpersonal skills, including negotiation, facilitation, and consensus building skills; ability to influence and persuade, without direct control.

Benefits

Training + Development

Interview process

Visa Sponsorship

Security clearance