Engagement Manager - Cloud Security (BFSI)

Location: Boston, MA - USA

As a Cloud Security Architect, you will be responsible for defining the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Further assist in the identification, analysis, evaluation, life-cycle management, and adoption of security technologies in Cloud environments that support business requirements and align with architecture standards and patterns.

• Architect, design, prioritize, coordinate, and communicate the security technologies necessary to ensure a highly secure yet usable computing environment in the Cloud.
• Provide strategic thought leadership, architecture expertise (SABSA, NIST, Zero Trust, Cloud Security Architecture) and build roadmaps to achieve target architecture.
• Formalize (e.g. in the form of reference architectures, guardrails, single point lessons, etc.) relevant information security principles and requirements that govern how to securely provision and protect Cloud access and usage across all dimensions of the customer business for all infrastructure and services
• Establish and document technical requirements from the business requirements, create enterprise level security architecture and design
• Architecture assessment and review of solution architecture documentation, high-level and detailed design documentation
• Promote and support the embedding of security best practice in architecture development processes to improve standardization
• Design security controls to protect cloud-based applications, data, and infrastructure.
• Conduct or facilitate threat modelling of services and applications that tie to the risk, data and industry drivers associated with the service or application
• Define/Develop and document the target reference security architecture (including high level capabilities/services) across hybrid IT (Multi-cloud, On-Premises, Industry) as target architecture.
• Develop and document architecture patterns and blueprints to uplift the coverage of the Security Controls and Capabilities in accordance with the target state architecture.
• Develop and document Technology Security Strategy and actionable Roadmap
• Provide guidance on architecture cloud security requirements in product selections / RFP
• Work closely with external vendors to bring new ideas / technologies into the business.

Qualifications:

• 15+ years of relevant experience
• Experience in Cloud Security architect role designing, reviewing, and supporting public clouds Azure, AWS and GCP.
• Stays current with leading and emerging security technologies and makes recommendations for use based on business value.
• A strong understanding of cloud computing technologies, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS).
• Extensive knowledge and experience with developing Cloud Security Frameworks using industry best practices such as those from the Cloud Security Alliance (CSA) and NIST CSF and regulatory requirements such as HIPAA, HITrust and PCI or closely related.
• Demonstrated capability to design, deploy, operationalize, and automate secure and highly scalable enterprise systems on public cloud – AWS, Azure and Google.
• BA or BS or equivalent in IT related degrees
• Certification like CISSP or CCSK, CCSP and Azure or AWS or GCP security Architect or professional certification are highly desirable