Senior Cloud Security Architect - Vice President

Role Description

The Vice President, Cloud Security Architecture will be responsible for ensuring that Information Security systems and Cloud infrastructures are configured, deployed, and maintained in accordance with SMBC’s polices and security standards.

This position requires participation in technical research and development to enable continuing innovation for Cyber Security and Information Risk management. This role is part of a team responsible for administering security projects designed to safeguard SMBC’s Cloud infrastructures which is made up of Azure, AWS and GCP. The Vice President of Cloud Security Architecture focuses on implementing and engineering information security solutions using industry’s best practices, defining and documenting projects, creating and executing project plans, engaging in project cost management, resource management and performing periodic reporting. Acts as a subject matter expert who utilizes his/her Cloud Security Engineering expertise to resolve complex problems in consideration of established policies, guidelines, or processes. 

Role Objectives

• Drive the architecture, design, implementation, and define cloud security operational directives on multiple security projects and business applications.
• Participate Business and Information Security projects to recommend security controls and solutions applicable.
• Provide guidance and recommendations for a secure security infrastructure.
• Proactively develop and enforce security plans and standards. 
• Gather and analyze performance and compliance metrics relating to the Bank’s information security and information risk standards.
• Continuously assess emerging security trends in the cloud and create policies using automation scripts and standards for adoption with SMBC Performs as the Subject Matter expert focused on multiple technologies within the Security domains (Security Engineering, IAM, Cloud Security, Data Security, Network Security, Encryption, Privileged Access Management, Federation etc.).
• Partner with relevant internal IT Application, Infrastructure, Network and Support teams to ensure that security controls are implemented at all significant layers, test those controls and perform gap analysis to find areas of improvement.
• Strong understanding and hands on implementation experience with SANS/CIS Top 20, NIST CSF, 800-53, ISO27001 and FFIEC CAT controls.
• Strong Incident Response skillset using NIST, CIS, MITRE ATT&CK and CIS frameworks. Being able to conduct threat modeling to determine major threats facing the firm.
• Participate in the development of the security roadmap and communicate the Technology Security vision to senior management and technical departments.
• Coordinates with project team the implementation, upgrade and maintenance of security solutions. 

Qualifications and Skills

Critical Job Knowledge and Core Competencies/Skills:

• Demonstrates in-depth understanding of AWS cloud infrastructure and security controls. Hands on configuration and troubleshooting experience of AWS.
• Good understanding of Azure and GCP cloud platforms is highly desired
• 7+ Years of hands-on security architecture, implementation and design experience required, designing globally scalable Cloud security solutions. Document Classification: Public
• In-depth experience of Terraform in a must requirement for this role. In addition, Bash, python, Perl or any other scripting language is highly desirable.
• Strong understanding of DNS, PKI, Encryption, Key Management, CMK is required to perform this role.
• Experience in cloud-based application architecture systems and solutions within a highly regulated environment.
• Strong knowledge of enterprise Information Security pillars (Perimeter security, Identity Management and Governance, Privileged Account Management, Compliance, Penetration testing, Encryption, Cloud Security, Incident Response, Vulnerability Management).
• Understanding of OWASP Top 10 highly desired.
• Good understanding of Zero Trust principles highly desired.
• Ability to communicate information security concepts across a broad range of technical & non-technical staff.
• Bachelor’s degree in information security, Compute Science or related field Required.
• One of the following certifications is required - CISSP, CEH, Azure Cloud security, AWS, GCP or equivalent Cloud certification. 

Additional Requirements