Security Architect - Vice President

SMBC•Charlotte, NC

1d•Hybrid

About The Position

SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges. In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd. Role Description The Vice President, Cloud Security Architecture will be responsible for ensuring that Information Security systems and Cloud infrastructures are configured, deployed, and maintained in accordance with SMBC’s polices and security standards. This position requires participation in technical research and development to enable continuing innovation for Cyber Security and Information Risk management. This role is part of a team responsible for administering security projects designed to safeguard SMBC’s Cloud infrastructures which is made up of Azure, AWS and GCP. The Vice President of Cloud Security Architecture focuses on implementing and engineering information security solutions using industry’s best practices, defining and documenting projects, creating and executing project plans, engaging in project cost management, resource management and performing periodic reporting. Acts as a subject matter expert who utilizes his/her Cloud Security Engineering expertise to resolve complex problems in consideration of established policies, guidelines, or processes.

Requirements

Demonstrates in-depth understanding of AWS cloud infrastructure and security controls.
Hands on configuration and troubleshooting experience of AWS.
7+ Years of hands-on security architecture, implementation and design experience required, designing globally scalable Cloud security solutions.
In-depth experience of Terraform in a must requirement for this role. In addition, Bash, python, Perl or any other scripting language is highly desirable.
Strong understanding of DNS, PKI, Encryption, Key Management, CMK is required to perform this role.
Experience in cloud-based application architecture systems and solutions within a highly regulated environment.
Strong knowledge of enterprise Information Security pillars (Perimeter security, Identity Management and Governance, Privileged Account Management, Compliance, Penetration testing, Encryption, Cloud Security, Incident Response, Vulnerability Management)
Bachelor’s degree in information security, Compute Science or related field Required
One of the following certifications is required - CISSP, CEH, Azure Cloud security, AWS, GCP or equivalent Cloud certification.

Nice To Haves

Good understanding of Azure and GCP cloud platforms is highly desired
Understanding of OWASP Top 10 highly desired.
Good understanding of Zero Trust principles highly desired.
Ability to communicate information security concepts across a broad range of technical & non-technical staff.

Responsibilities

Drive the architecture, design, implementation, and define cloud security operational directives on multiple security projects and business applications.
Participate in Business and Information Security projects to recommend security controls and solutions applicable.
Provide guidance and recommendations for a secure security infrastructure.
Proactively develop and enforce security plans and standards.
Gather and analyze performance and compliance metrics relating to the Bank’s information security and risk standards.
Continuously assess emerging security trends in the cloud and create policies using automation scripts and standards for adoption with SMBC
Performs as the Subject Matter expert focused on multiple technologies within the Security domains (Security Engineering, IAM, Cloud Security, Data Security, Network Security, Encryption, Privileged Access Management, Federation etc.).
Partner with relevant internal IT Application, Infrastructure, Network and Support teams to ensure that security controls are implemented at all significant layers, test those controls and perform gap analysis to find areas of improvement.
Strong understanding and hands on implementation experience with SANS/CIS Top 20, NIST CSF, 800-53, ISO27001 and FFIEC CAT controls.
Strong Incident Response skillset using NIST, CIS, MITRE ATT&CK and CIS frameworks.
Being able to conduct threat modeling to determine major threats facing the firm.
Participate in the development of the security roadmap and communicate the Technology Security vision to senior management and technical departments.
Coordinates with project team the implementation, upgrade and maintenance of security solutions.