Information Security Management

1. Ability to analyze business needs to help ensure solutions meet the objectives by combining industry best practices, product knowledge, and business acumen
2. Ability to understand complex business and cloud needs, requirements, and projects scopes, with a focus on information security and compliance requirements, specifically on their control ownership, implementation, and maintenance functionality, with an eye for effectiveness and scale
3. Good knowledge of security architectures, the definition of security requirements and security design activities
4. Good communication skills, including comprehensive report writing and specific experience communicating security content
5. Presentation skills, able to articulate and present to a wide audience from technical to the board room
6. Knowledge of ISO 27000 Standards, ISMS implementation and audit processes
7. Ability to participate in Risk Assessments
8. Knowledge of PCI DSS, ISO 27001, GDPR, CSA CCM, AICPA /SSAE16, SANS Top 20
9. Knowledge on Regulatory Compliance

Preferred Experience and Knowledge

• Experience in designing, implementing, and delivering security for cloud native, distributed computing, and architectural solutions with a principle of “Secure by Design”
• Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development (Application Security), data protection, cryptography, key management, identity and access management (IAM), network security) within SaaS, IaaS, PaaS, and other cloud environments
• Knowledge of basic cloud networking including set-up and configuration of VLANs, setup and configuration of VPNs, and architecting secure cloud connectivity solutions.
• Knowledge of virtualization, containers, service-mesh and enterprise service business
• Experience with structured Enterprise Architecture practices, hybrid cloud deployments, and on-premise-to-cloud migration deployments
• Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, etc)
• Experience with service-oriented architecture for cloud-based services
• Knowledge of cloud security and governance tools, cloud access security brokers (CASBs), and server virtualization technologies.

Preferred Certifications: One or more cloud certifications: OCI Associate Architect, OCI Architect Professional, AWS Certifications: AWS Solutions Architect, AWS Security Specialist, Microsoft Certified: Azure Security Engineer, Associate, Microsoft Certified: Azure Solutions Architect, GCP Cloud Architect Certification