Job Description:
The Cloud Security Engineering Lead in Global Information Security will be responsible for defining, implementing, and overseeing our cloud security engineering strategy. You will be part of a team of highly skilled engineers and collaborate closely with cross-functional teams to ensure the security and compliance of our cloud-based systems and services. This role requires a combination of technical expertise, strategic thinking, and leadership to drive innovation and ensure the highest level of security for our cloud-based infrastructure and services.
Engineering Leadership: Provide strategic leadership as a part of a team of cloud security engineers, fostering innovation and a culture of excellenceSecurity Architecture: Develop and implement robust security architecture for cloud environments, ensuring the protection of data, applications, and systemsSecurity Operations: Oversee day-to-day security operations in the cloud, including threat detection, incident response, and vulnerability managementSecure DevOps: Collaborate with DevOps teams to integrate security into the software development and deployment lifecycleCompliance: Ensure compliance with industry standards (e.g. NIST, ISO 27001) and regulatory requirements related to cloud securityRisk assessment: Conduct risk assessments and vulnerability assessments to identify and mitigate security risks in cloud environmentsSecurity Tooling: Evaluate and implement security tools and technologies to enhance cloud security capabilitiesIncident Response: Lead the response to security incidents and breaches in cloud systems, coordinating with relevant teams.Training and Development: Provide training and professional development opportunities to security engineering team members.
Required Skills
8+ years of professional experience including extensive experience in cloud security engineering and a minimum of 5 years in leadership rolesStrong knowledge of cloud platform (e.g. AWS, Azure, GCP) and cloud security best practicesAbility to bring multiple stakeholders together, including senior business leaders, operations, risk, finance, regulatory, and cut to the heart of issues to reach consensus & decisionsExperience with security technologies, including IDS/IPS, firewalls, SIEM, and SOAR solutionsFamiliarity with DevSecOps principles and practicesExcellent leadership, communication, team-building skills, strong analytical and problem-solving abilities.Bias for action and a commitment to build partnerships in a dynamic risk & threat driven environmentPossesses a solid understanding of the technologies underlying our platforms and the confidence to engage in technical discussions across the organization
Desired Skills
Bachelor's or Master's degree in Computer Science, Information Security, or a related fieldStrong cyber thought leader and strategist who can influence at very senior levels of the organizationInspires teams across Global Information Security, Global Technology, and control partners to deliver together Strong interpersonal skills; ability to make effective presentations and communicate technical concepts to non-technical partiesExhibits executive leadership behaviors when addressing organizational conflict and removing roadblocks to effective deliveryStrong relationship management skills to navigate the complexities of gaining buy-in and building consensusExcellent communication, influencing and facilitation skills with deep intellectual curiosity and innovative thinkerDemonstrate neutral objectivity and seek the best outcome for the business. Enterprise mindset; considers E2E process impact when evaluating opportunities/challengesMaximizes organizational capability with a demonstrated commitment to valuing diversity
Enterprise Role Overview:
Senior contributor, with accountability for researching, designing, and engineering information security (authentication, perimeter security, security & compliance tools, etc) & directory technology systems (software & hardware) and security policies / procedures. Utilizes in-depth technical / project knowledge and business requirements to design secure solutions to meet customer / client needs while protecting the Bank's assets. Serves as organization spokesperson on specialized projects. Acts as a prime consultant on large projects that affect the organizations long-term goals and objectives. Exercises independent judgment in methods, techniques, and evaluation criteria for obtaining results. Provides direction and guidance to others in the group. Works under minimal supervision, with general guidance from Technical or Senior Technical Manager. Typically 7-10 years of IT experience.
Shift:
1st shift (United States of America)
Hours Per Week:
40