Junior Social Media Officer

The Senior Director, SecDevOps will foster and implement a DevSecOps mindset and program to enable frictionless agility across development, operations, and security teams. The ideal candidate will have advanced technical skills, demonstrate collaborative leadership, and effectively interact at all levels of the organization.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Partner with technology stakeholders to define DevSecOps practices and integrate DevSecOps in the software development lifecycle and promote a shift left security culture across the organization
• Build our DevSecOps strategy and roadmap to integrate cybersecurity into the DevOps process
• Collaborate with teams to integrate agile application security principles and practices
• Implement tools for application security testing
• Conducting security-related research and assessments
• Secure the SDLC process via automation and security processes in CI/CD pipeline
• Monitors the external threat environment for emerging threats, and advises relevant stakeholders on the appropriate courses of action
• Coordinates the development of implementation of incident response plans and procedures to ensure that business-critical services are recovered in the event of a security event; provides direction, support, and in-house consulting in these areas
• Contribute to the overall information security strategy
• Responsible for vendor management, including product and vendor evaluation, contract negotiation, supplier relationship management and consulting management
• Recruit, motivate, mentor, and lead talent to be their best

SUPERVISORY RESPONSIBILITIES:

• Provide direction to other individuals.
• Supervises staff, including hiring, scheduling, assigning work, and reviewing performance.

EDUCATION/EXPERIENCE/KNOWLEDGE & SKILLS:

Education:

• Bachelors degree in related discipline and 15 years of related experience; or
• Masters degree in related discipline and 13 years of related experience; or
• PhD degree in related discipline and ten years of related experience; or
• Equivalent combination of education and experience

Experience/The Ideal Candidate will have:

• Must have extensive experience with production cloud environments on AWS
• Experience developing, deploying, and managing software applications in public cloud environments
• Experience utilizing DevSecOps technologies to secure Continuous Delivery
• Experience securing web and mobile applications with strong understanding application cybersecurity threats, countermeasures, and issues
• Experience with object-oriented programming, functional programming, lambdas, serverless design, and micro-services architectures
• Experience successfully executing programs that meet the objectives of excellence in a dynamic business environment
• Experience in Biotech/Pharma is a plus

Knowledge/Skills:

• Demonstrated experience and success in senior leadership roles in information technology
• Knowledge of common information security and SDLC frameworks
• Sound knowledge of business management and a working knowledge of information security risk management and cybersecurity technologies
• DevOps practices such as build/release management and secure SDLC
• Security process automation in CI/CD pipeline
• OWASP Top 10
• Up-to-date knowledge of methodologies and trends in both business and IT
• Ability to foster collaborative working relationships with technology groups and other stakeholders, including vendor relationships
• Ability to lead others irrespective of reporting structure
• Thorough planning and tracking skills, well-organized, focused on results, capable of managing multiple projects, excellent time management with respect to priorities and self-management
• Excellent judgement and problem-solving skills, including negotiation and conflict resolution
• Ability to leverage both internal and external resources to expedite and deliver projects
• Ability to work in a team environment, create timelines, and continually make necessary adjustments
• Excellent writing, presentation, and oral communication skills

Remote Work :

No