Overview

The Senior Cloud Security Architect (Digital Banking) provides technical leadership and expertise in the secure design, development, and evaluation of applications, systems and solutions to secure customer and sensitive information throughout the entire end to end for a retail digital banking platform. The role will be responsible for working with the Application Development, Infrastructure, and Global Information Security teams to ensure that the applications, platform, and solutions adhere to bank standards and industry best practices for information security. This highly visible and time sensitive position will play a crucial role as we work to launch the digital banking platform.

This role will function as a security leader and directly contribute to the overall enterprise architecture by setting the security vision, strategy and technical direction across all types of on-premise and cloud applications, solutions and services (including infrastructure, platform, and software as a service (iaas/paas/saas).

The successful candidate should have strong subject matter expertise and be self-motivated with a proven track record for understanding complex technical architectures and advanced security principles. The person will serve as the central point of contact on enterprise security architectures for the Digital Banking Unit technology teams within the organization on all matters related to information security architecture controls.

The candidate should possess interpersonal, and communications skills required to partner with other leaders across the business to identify opportunities and risks, develop and deliver solutions that support business strategies with the ultimate goal of protecting the bank’s non-public information.

Responsibilities

• Provide technical expertise on enterprise security for applications and services in support of a Retail Digital Banking platform launch.
• Provide guidance and leadership on secure architectures including controls related to security configurations, customer data protection, user access controls, auditing and monitoring, and any other relevant security controls that may be required.
• Ensure security architecture principles are enforced to attain the highest level of risk assurance and control for all applications, services, and solutions.
• Identify security design gaps and security risks in existing and proposed architectures across the Digital Bank and recommend/implement enhancements and remediations.
• Assess designs and security controls for technologies and develop strategies for all efforts related to security initiatives which involve the use of cloud services and solutions.
• Define, communicate, and validate security requirements to guide security initiatives and ensure organizational alignment with the global security strategy.
• Design, implement and manage enterprise class network and security controls in public and hybrid clouds such as Microsoft Azure and Amazon Web Services and across various types; Infrastructure, Platform, and Software-as-a-Service (IaaS/PaaS/SaaS) based on industry and security, compliance best practices. Ensure automation and orchestration and security event visibility is embedded in all designs.
• Partner with the Global Information Security team, Technology and Business leadership across the bank to advance security standards and guidelines.
• Ensure the architecture and security controls are in compliance with bank standards and policies, follow industry best practices and comply with regional and local regulations as it relates to security and protection of non-public information.
• Perform proof of concept testing for integrating new 3rd party security products into the development and deployment processes. Lead the implementation of proposed solutions while interfacing with application support and development teams ensuring the coordination, communication, and successful delivery of projects.
• Manage, recruit, and build a strong technical team that fits the banks culture. Communicate job expectations, motivate staff, plan, and direct workloads, and monitor progress and contributions. Develop and discuss performance appraisals with employees, address performance issues and taking corrective action plans as necessary.
• Manage projects by following the banks project management methodology including but not limited to project documentation, delivery schedules, contract reviews and negotiations, statements of work and procurement of products and services. Enhance security team accomplishments and competence by planning the delivery of solutions, responding to technical and procedural questions
• Educate team members and various stakeholders on security standards and best practices, recommend, and stay well informed with innovative industry trends and training opportunities. Cultivate and promote a culture of security awareness and education of personnel to ensure security policies and best practices are always adhered to.

Qualifications

• Bachelor’s degree in Computer Science, Engineering or related discipline.
• 10 years of experience in the enterprise class cloud architecture, design, engineering, and implementation of secure applications and networks.
• Demonstrated expertise with cloud-based client facing financial or retail banking systems.
• Ability to architect, develop, and research various enterprise security technologies for all types of cloud-based solutions and services used by large financial institutions.
• Demonstrated expertise and proficiency in the security controls used within various offerings provided by Microsoft Azure, Amazon AWS, and Google Cloud Computing Services.
• Extensive knowledge in Data Center Technologies, Networks and Security.
• Expert knowledge of Identity and Access Management technologies and solutions.
• Have a strong working knowledge of Application Security, Data Protection, Cryptography, Key Management, Federation, Network Security, Crowdsourcing, and Threat Intelligence as it relates to the cloud.
• A strong working knowledge of cybersecurity threats, how they transcend the internet, the impact on financial services, and the types of mitigations cloud providers and services offer to enhance security control, visibility, and reporting functions.
• The ability to develop and execute upon the use of new cloud-based strategies and standards to continuously enhance security controls and visibility effectiveness throughout the enterprise.
• Must have working knowledge of the various requirements set forth by regulators, government mandates, and compliance obligations as it relates to the Financial Services industry and as it relates to cloud services and providers.
• Knowledge of security and industry frameworks such as FFIEC CAT, ISO27001/02, NIST 800-53, SANS Top 20, Critical Security Controls, COBIT, and NIST Cybersecurity Framework.
• Self-motivated with strong work ethics and the ability to work independently with minimal supervision.
• Strong understanding of cloud security architectures and principles.
• Relevant industry certifications related to Information Security (e.g. CISSP, CISM), Architecture (e.g. TOGAF, Azure, AWS).
• Strong communication skills (written and verbal) with technical and non-technical audiences.
• Leadership skills with a proven track record in driving change, innovation, and achieving results.