Allergan Data Labs is on a mission to transform the Allergan Aesthetics beauty business at AbbVie, one of the largest pharmaceutical companies in the world. Our iconic brands include Botox, CoolSculpting, Juvéderm, and more. The medical aesthetics business is ripe for rapid growth and disruption, and we are looking for an experienced Manager, Cloud Security to add to our high-performing team to do just that.

Our team has successfully launched a new and innovative technology platform, Allē, which serves millions of consumers, tens of thousands of aesthetics providers, and thousands of colleagues throughout the US. Since its launch in November 2020, Allē has delivered curated promotions, personalized experiences, and millions of consumers use it as part of their beauty journey. Now, we are looking for a Manager, Cloud Security as we prepare to launch a new array of game-changing technologies on our successfully adopted platform.

We're looking for a Manager, Cloud Security interested in working within a startup-oriented environment while having the backing of a very large company. If that's you, please read on.

As the Manager, Cloud Security, you will report to the Director of Cloud Engineering & Security, and will continuously collaborate with key stakeholders across the business to solve the most critical technical problems as a hands-on engineering leader.

People & Team Leadership:

• Manage, lead, and hire a team of cloud security engineers providing mentorship, and professional development guidance

• Foster a collaborative and inclusive team culture, encouraging knowledge sharing and continuous learning.

Cloud Security Strategy:

• With Cloud Security leadership, develop and implement cloud security strategies, ensuring the security and compliance of our cloud-based infrastructure and applications.

• Collaborate with cross-functional teams to design and implement effective security measures and controls across our cloud environment.

• Collaborate with senior management to ensure alignment of cloud security initiatives with overall business objectives.

Security Operations and Incident Response:

• Plan and conduct regular security assessments, including vulnerability assessments and penetration testing, to identify and address potential security vulnerabilities.

• Stay up to date with the latest security threats and trends, and provide recommendations for improvement.

• Manage security incidents, including investigating and responding to security incidents, and implementing remediation actions.

Compliance and Risk Management:

• Stay informed about cloud security regulations and standards, ensuring compliance in all security-related activities.

• Lead security audits and compliance assessments, ensuring adherence to relevant regulations and industry standards.

• Develop and maintain cloud security policies, standards, and procedures, communicating and enforcing them across the organization.

• Provide guidance on security best practices and ensure the adoption of security controls throughout the software development lifecycle.

Security Awareness and Training:

• Foster a culture of security awareness and accountability, delivering security training and education programs to employees.

Qualifications: 

• Bachelor's degree in Computer Science, Information Technology, or a related field. 

• Proven experience (1-3 years) in a leadership role managing cloud security initiatives. 

• Deep understanding of cloud security concepts, including identity and access management, network security, and data protection. 

• Extensive hands-on experience with cloud platforms such as AWS, Azure, or GCP, including knowledge of security services and features. 

• Strong knowledge of cloud security tools and technologies, such as CloudTrail, Security Hub, Azure Security Center, or Google Cloud Security Command Center. 

• Familiarity with various programming languages (e.g., Java, C#, Python) and frameworks. 

• Proficiency in using security testing tools and technologies, such as SAST, DAST, and WAF. 

• Knowledge of secure SDLC practices and methodologies. 

• Strong analytical and problem-solving skills, with the ability to think strategically and provide innovative solutions to complex security challenges. 

• Excellent communication and interpersonal skills, with the ability to effectively collaborate with cross-functional teams and senior stakeholders. 

• Relevant security certifications (e.g., CISSP, CCSK, AWS Certified Security - Specialty, Azure Security Engineer Associate, Google Cloud Certified - Professional Cloud Security Engineer) are a plus. 

Core Values

• Be Humble: You're smart yet always interested in learning from others.

• Work Transparently: You always deal in an honest, direct, and transparent way.

• Take Ownership: You embrace responsibility and find joy in having the answers.

• Learn More: Through blog posts, newsletters, podcasts, video tutorials, and meetups, you regularly self-educate and improve your skill set.

• Show Gratitude: You show appreciation and return kindness to those you work with.

Perks for our Full Time Employees:

• Competitive salary.

• Competitive annual bonus targets.

• 401k with dollar for dollar match, up to 6% of eligible earnings (base, bonus). Plus additional company contribution.

• RSU grants (Long Term Incentives) for approved roles.

• Comprehensive medical, dental, vision and life insurance.

• 17 paid holidays per year, including 3 floating holidays.

• Annual Paid Time Off (PTO), with separate sick days

• 12 weeks paid Parental Leave

• Caregiver Leave

• Adoption and Surrogacy Assistance Plan

• Flexible workplace accommodations.

• We celebrate our wins with opportunities to attend Lakers, Knicks, Anaheim Ducks, Anaheim Angels and NY Rangers games.

• Opportunities to attend concerts, festivals and other live entertainment events in recognition of delivering great work.

• Tuition reimbursement.

• Attend a tech or marketing conference each year.

• A MacBook Pro and accompanying hardware to do great work.

• A modern productivity toolset to get work done: Slack, Miro, Loom, Lucid, Google Docs, Atlassian and more.

• Generous discounts on SkinMedica skin care products.

• Discounted aesthetic treatment days multiple times a year.

• $600 worth of Alle benefits each year to use towards aesthetic treatments and products.

• Eligible for donation matching to over 1.5 million nonprofit organizations.

• Attend AWS Re:Invent in person (Las Vegas) or virtually each year (for certain roles)