Security Architect Vice President
Share
Job Location:
Charlotte, VT - USA
Monthly Salary:
Not Disclosed
Posted on:
11 hours ago
Vacancies:
1 Vacancy
Job Summary
SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history SMBC Group offers a diverse range of financial services including banking leasing securities credit cards and consumer finance. The Group has more than 130 offices and 80000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group Inc. (SMFG) is the holding company of SMBC Group which is one of the three largest banking groups in Japan. SMFGs shares trade on the Tokyo Nagoya and New York (NYSE: SMFG) stock exchanges.
In the Americas SMBC Group has a presence in the US Canada Mexico Brazil Chile Colombia and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia the Group offers a range of commercial and investment banking services to its corporate institutional and municipal clients. It connects a diverse client base to local markets and the organizations extensive global network. The Groups operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC) SMBC Nikko Securities America Inc. SMBC Capital Markets Inc. SMBC MANUBANK JRI America Inc. SMBC Leasing and Finance Inc. Banco Sumitomo Mitsui Brasileiro S.A. and Sumitomo Mitsui Finance and Leasing Co. Ltd.
Role Description
The Vice President Cloud Security Architecture will be responsible for ensuring that Information Security systems and Cloud infrastructures are configured deployed and maintained in accordance with SMBCs polices and security standards. This position requires participation in technical research and development to enable continuing innovation for Cyber Security and Information Risk management.
This role is part of a team responsible for administering security projects designed to safeguard SMBCs Cloud infrastructures which is made up of Azure AWS and GCP. The Vice President of Cloud Security Architecture focuses on implementing and engineering information security solutions using industrys best practices defining and documenting projects creating and executing project plans engaging in project cost management resource management and performing periodic reporting. Acts as a subject matter expert who utilizes his/her Cloud Security Engineering expertise to resolve complex problems in consideration of established policies guidelines or processes.
Role Objectives
- Drive the architecture design implementation and define cloud security operational directives on multiple security projects and business applications.
- Participate in Business and Information Security projects to recommend security controls and solutions applicable. Provide guidance and recommendations for a secure security infrastructure. Proactively develop and enforce security plans and standards.
- Gather and analyze performance and compliance metrics relating to the Banks information security and risk standards.
- Continuously assess emerging security trends in the cloud and create policies using automation scripts and standards for adoption with SMBC
- Performs as the Subject Matter expert focused on multiple technologies within the Security domains (Security Engineering IAM Cloud Security Data Security Network Security Encryption Privileged Access Management Federation etc.).
- Partner with relevant internal IT Application Infrastructure Network and Support teams to ensure that security controls are implemented at all significant layers test those controls and perform gap analysis to find areas of improvement.
- Strong understanding and hands on implementation experience with SANS/CIS Top 20 NIST CSF 800-53 ISO27001 and FFIEC CAT controls.
- Strong Incident Response skillset using NIST CIS MITRE ATT&CK and CIS frameworks. Being able to conduct threat modeling to determine major threats facing the firm.
- Participate in the development of the security roadmap and communicate the Technology Security vision to senior management and technical departments.
- Coordinates with project team the implementation upgrade and maintenance of security solutions.
Qualifications and Skills
- Demonstrates in-depth understanding of AWS cloud infrastructure and security controls. Hands on configuration and troubleshooting experience of AWS.
- Good understanding of Azure and GCP cloud platforms is highly desired
- 7 Years of hands-on security architecture implementation and design experience required designing globally scalable Cloud security solutions.
- In-depth experience of Terraform in a must requirement for this addition Bash python Perl or any other scripting language is highly desirable.
- Strong understanding of DNS PKI Encryption Key Management CMK is required to perform this role.
- Experience in cloud-based application architecture systems and solutions within a highly regulated environment.
- Strong knowledge of enterprise Information Security pillars (Perimeter security Identity Management and Governance Privileged Account Management Compliance Penetration testing Encryption Cloud Security Incident Response Vulnerability Management)
- Understanding of OWASP Top 10 highly desired.
- Good understanding of Zero Trust principles highly desired.
- Ability to communicate information security concepts across a broad range of technical & non-technical staff.
- Bachelors degree in information security Compute Science or related field Required
- One of the following certifications is required - CISSP CEH Azure Cloud security AWS GCP or equivalent Cloud certification.
Additional Requirements
SMBCs employees participate in a Hybrid workforce model that provides employees with an opportunity to work from home as well as from an SMBC office. SMBC requires that employees live within a reasonable commuting distance of their office location. Prospective candidates will learn more about their specific hybrid work schedule during their interview process. Hybrid work may not be permitted for certain roles including for example certain FINRA-registered roles for which in-office attendance for the entire workweek is required.
SMBC provides reasonable accommodations during candidacy for applicants with disabilities consistent with applicable federal state and local law. If you need a reasonable accommodation during the application process please let us know at
Required Experience:
Exec
