Cloud Security Architect

Cloud Security Architect - Vice President
Job Level: Vice President
Location: New York, NY, US, 10172
Employment Type: Full Time
Requisition ID: 1190
SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG's shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization's extensive global network. The Group's operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC Rail Services LLC, Manufacturers Bank, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

The anticipated salary range for this role is between $158,000.00 and $198, The specific salary offered to an applicant will be based on their individual qualifications, experiences, and an analysis of the current compensation paid in their geography and the market for similar roles at the time of hire. The role may also be eligible for an annual discretionary incentive award. In addition to cash compensation, SMBC offers a competitive portfolio of benefits to its employees.

Role Description
The Vice President, Cloud Security Architecture will be responsible for ensuring that Information Security systems and Cloud infrastructures are configured, deployed, and maintained in accordance with SMBC's polices and security standards. This position requires participation in technical research and development to enable continuing innovation for Cyber Security and Information Risk management.

This role is part of a team responsible for administering security projects designed to safeguard SMBC's Cloud infrastructures which is made up of Azure, AWS and GCP. The Vice President of Cloud Security Architecture focuses on implementing and engineering information security solutions using industry's best practices, defining and documenting projects, creating and executing project plans, engaging in project cost management, resource management and performing periodic reporting. This position requires participation in technical research and development to enable continuous innovation for Cyber Security and Information Risk department. Acts as a subject matter expert who utilizes his/her Cloud Security Engineering expertise to resolve complex problems in consideration of established policies, guidelines, or processes. Reports to Head of Cloud Security Architecture with reporting lines into the Head of InfoSec of Americas Division.

Role Objectives
Implement the Firm's Cybersecurity Strategy by architecting, engineering, deploying, and operating technical security controls as they related to virtual machines, storage, key vault, database services infrastructures in the Cloud.
Engineer and operate solutions that protect Cloud resources from malicious internal and external threats by providing additional preventative, detective and hardening controls and by enabling Real Time endpoint detection and response capabilities.
You will have strong Cloud Infrastructure/Security knowledge and experience working in enterprise on-prem and Cloud environments.
You will research, architect, engineer and deploy SAST, DAST, SCA tools and Container based security controls.
You will automate security hardening tasks in Cloud to ensure gaps are identified and addressed quickly with our standards.
Performs as the Subject Matter expert focused on multiple technologies within the Security domains (Security Engineering, IAM, Cloud Security, Data Security, Network Security, Encryption, Privileged Access Management, Federation etc.).
Establishes a strategic security architecture vision, including standards and frameworks for medium to large enterprises.
Develops and maintains log analysis solutions, including data collection and aggregations, data normalization, and reporting.
Review and analysis of security logs from a wide variety of sources.
Coordinate and perform security audits and vulnerability assessments to assess internal security procedures and compliance requirements.
Work with relevant internal IT Application, Infrastructure, Network and Support teams to ensure that security controls are implemented at all significant layers, test those controls and perform gap analysis to find areas of improvement.
Strong understanding and hands on implementation experience with SANS/CIS Top 20, NIST CSF, 800-53, ISO27001 and FFIEC CAT controls.
Strong Incident Response skillset using MITRE ATT&CK and Cyber Kill Chain frameworks. Being able to conduct threat modeling in order to determine major threats facing the firm.
Good understanding of Zero Trust principles.
Perform testing to evaluate new products for network and system security controls.
Supporting offensive architecture analysis and design of defense-in-depth solutions
Participate in the development of the security roadmap and communicate the Technology Security vision to senior management and technical departments.
Coordinates with project team the implementation, upgrade and maintenance of security solutions.
Creates, maintains, and executes required test case scenarios and use cases to verify requirements
Mentor junior team members and inspire them to take on challenging tasks within the department.
Monitors data quality and assists in the collection of data for Risk Management and internal auditors.

Qualifications and Skills
7+ Years of hands-on security architecture, implementation and design experience required, designing globally scalable Cloud security solutions.
Strong *nix security engineering background required.
Strong knowledge of Automation using Terraform. Ansible a plus
3+ years of experience with Azure, AWS Docker/EKS and container solutions required.
Good understanding of DevSecOps concepts highly desired.
Experience working with CI/CD pipelines and IaC highly desired
Scripting experience in Terraform, bash, python, perl or any other scripting language required.
Strong understanding of DNS concepts and DNS management using commercial tools
Cloud Security and hands on knowledge with Azure and/or AWS is highly desired.
3+ years' experience delivering large and complex programs - where you own the business or technical vision, collaborate with large cross-functional teams, secure commitments on deliverables and unblock teams to land business impact
Experience in building systems and solutions within a highly regulated environment
Strong knowledge of enterprise Information Security pillars (Perimeter security, Identity Management and Governance, Privileged Account Management, Compliance, Penetration testing, Encryption, Cloud Security, Incident Response, Vulnerability Management)
Understanding of OWASP Top 10 highly desired.
Good understanding of Zero Trust principles highly desired.
Excellent communication skills, writing skills, and the ability to work with internal teams.
Be a performance-driven team player with an excellent attitude.
Performing gap analysis within different environments coupled with an in depth understanding of regulatory guidelines as well as standards and best practices related to CIS Top 20, ISO and NIST CSF frameworks.
Ability to communicate information security concepts across a broad range of technical & non-technical staff.
Bachelor's degree in information security, Compute Science or related field Required
One of the following certifications is required - CISSP, CEH, Azure Cloud security, AWS, GCP or equivalent Cloud certification.