Senior Cloud Security Architect

Role Description

SMBC is seeking a Senior Cloud Security Architect who is interested in building a career at a fast growing and reputable Bank. The Senior Cloud Security Architect will develop and maintain system-specific cyber security policy best suited for business function and regulatory requirements. In addition, you will evaluate network security policy and set configurations for internal networks, external access, routers and firewalls and security certificates They will be given opportunities to participate in devising and implementing testing plans for security systems, training initiatives, incident response and management plans, monitoring and reporting systems and disaster recovery plans.

This role will report to the Executive Director of Cloud Security Architecture.

Role Objectives: Delivery

• Develop and maintain system-specific cyber security policy best suited for business function and regulatory requirements.
• Evaluate network security policy and set configurations for internal networks, external access, router and firewall configurations, and security certificates. Develop machine security policies, select appropriate anti-virus technologies and determine operational best practices.
• Evaluate all new applications and systems for security requirements and risk, creating allowance lists and policy revisions as needed.
• Devise and implement testing plans for security systems, training initiatives, incident response and management plans, monitoring and reporting systems, and disaster recovery plans.
• Work with business unit leads and compliance teams to set security risk objectives, develop operational policy and guidance, and determine budgets for security systems.
• Partner with IT systems and network infrastructure teams to develop and implement security policy and configurations for corporate devices, connections and data resources.
• Engage with business units and application development teams to ensure third party and internally developed applications conform to security standards and do not create security gaps.
• Collaborate with cyber security analysts to operate testing and training programs, apply policy and install security applications, and provide incident response and tracking to support analysis efforts.

Qualifications and Skills

• 7 years of experience highly desired
• Demonstrate comprehensive understanding of various network, data and system security protocols and methodologies.
• Advanced IT security certifications.
• Display knowledge of regulations governing data security, industry and operational best practices, risk mitigation techniques and incident response protocols.
• Possess ability to coordinate policy and system updates, incident response plans, testing and training, and monitoring and reporting efforts across multiple departments and functions.
• Show familiarity with the benefits and risks associated with new technologies and services and encryption protocols.
• Additionally, remain up to date on major vulnerabilities, emerging threats and social engineering efforts.
• Have strong verbal and written communication skills.
• Ability to demonstrate a self-motivated and disciplined approach to learning and working.
• Ability to work in a team environment and demonstrate leadership skills when needed.
• Possess a highly developed sense of personal accountability and follow-through with an ability to effectively prioritize multiple personal tasks, projects, and goals.

Additional Requirements