Your key responsibilities
Define security architectures and provide pragmatic security guidance that balance business benefit and risks.
Design and develop cloud platform-specific security policies, standards, and procedures for management group and account/subscription management and configuration (e.g. Azure Policy, Azure Security Center, AWS Config), identity management and access control, firewall management, auditing and monitoring, security incident and event management, data protection, user and administrator account management, SSO, conditional access controls and password/secrets management.
Engage IT project teams throughout the SDLC to identify and prioritize applicable security controls and provide guidance on how to implement these controls
Perform risk assessments of information systems and infrastructure
Maintain and enhance the Information Security risk assessment methodology
Define security configuration standards for platforms and technologies
Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit
Translate technical vulnerabilities into business risk terminology for business units and recommend corrective actions to customers and project stake-holders
Provide knowledge sharing and technical assistance to other team members
Act as Subject Matter Expert (SME) in responsible technologies and have deep technical understanding of responsible portfolios
Skills and attributes for success
Experience with Cloud Identity and Access management solutions (AAD, Federation services, SAML, Ping) in implementation and operations.
experience with Big Data and advanced analytics, AI/ML services (such as /Azure SQL/Google Cloud SQL /Azure HDInsight/Key management solutions, Storage and backup, Load balancing, Security Management, Databases and EC2 or VM machine hosting Databricks, Data Factory, Data Lake Storage/BigQuery, Azure Analysis Services, Synapse Analytics, Machine Learning, etc.)
Experience in working with different Cloud platforms (Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as a Service (IaaS)) and environments (Public, Private, Hybrid) in a security role.
hands-on technical experience implementing security solutions for leading Cloud service providers e.g., Amazon AWS, Microsoft Azure, Google Cloud.
Experience in Azure Devops, work item management, and software development (web security development)
Ability to facilitate compromise to incrementally advance security strategy and objectives
Ability to team well with others to facilitate and enhance the understanding compliance to security policies
Experience facilitating meetings with multiple customers and technical staff, including building consensus and mediating compromise
Five or more years Working experience with the architecture, design and engineering of web-based multi-tier information systems or network infrastructures
Experience conducting risk assessments, vulnerability assessments, vendor and third party risk assessments and recommending risk remediation strategies
Experience working with common information security standards, such as: ISO 27001/27002, NIST, PCI DSS, ITIL, COBIT
To qualify for the role, you must have
Five or more years of experience in the management of a significant Information Security risk management function
5 or more years of experience in an Information Security or Information Technology discipline
Experience in managing the communication of security findings and recommendations to IT project teams and management
Ideally, you ll also have
Exceptional judgment, tact, and decision-making ability
Flexibility to adjust to multiple demands, shifting priorities, ambiguity, and rapid change
Outstanding management, interpersonal, communication, organizational, and decision-making skills
Strong English language skills are required
Candidates are preferred to hold or be actively pursuing related professional certifications within the GIAC family of certifications or CISSP, CISM, CISA or Azure certifications (AZ500, AZ303, AZ304, AZ900)