Oracle’s Software Assurance organization has the mission is to make application security and software assurance, at scale, a reality. We are an inclusive and diverse team of high calibre application security researchers and security architects, distributed globally, who thrive on new challenges. We are seeking a Senior Manager of Security Architecture with the right mix of hands-on defensive and offensive security experience and a passion for managing security architects while providing them and your peers with technical leadership.  You must relish the challenge of security architecture and the analysis of large, complex software products. Creativity and broad technical knowledge are highly valued; being able to design secure products that are technically possible within stakeholder requirements is essential in this role. 

Work You’ll Do

As the leader of the team, you will be responsible for planning, prioritising, and delivering in depth security architecture across a variety of products and services. You will help grow your team members to achieve outstanding results.  You foster the creative atmosphere to let security architects innovate while holding them accountable for making smart decisions and delivering results.  You are ambitious, yet humble – you realise there are always opportunities for improvement, you take on feedback from team members and introspect to raise the bar for yourself and your team. Responsibilities include:

• Leading a team of security architects to perform software assurance of computer systems
• Overseeing the design and evaluation of complex systems for computer security
• Creating, reviewing, and maintaining threat models for key components
• Addressing a broad range of strategic security concerns in infrastructure and software engineering designs 
• Keeping up with new technologies for technical expertise and business analysis
• Addressing challenges in design, business goals, and stakeholder constraints for secure architecture
• Scoping, prioritising, and reviewing security assessments and vulnerability research
• Performing risk assessments of complex systems

What You’ll Bring

• Demonstrable experience in designing and evaluating complex systems for computer security
• Demonstrable experience in security leadership roles
• Demonstrable experience in creating, maintaining, and reviewing threat models for software development or operations teams
• Understanding of application security vulnerabilities and mitigations
• Awareness of emerging security issues, risks, and vulnerabilities
• Understanding of data privacy and data security principles
• Demonstrated ability to think strategically and build strategic partnerships
• Expert ability to communicate information clearly and concisely in written, verbal, and high-impact presentations
• Demonstrated history of attracting and retaining high calibre employees
• Experienced in complex decision-making
• Experienced in developing and executing operational plans to deliver business results
• Eligibility to work in Australia without sponsorship

Nice to Have

• Offensive and defensive security experience
• Experience with the identification and protection of sensitive data, including the development or implementation of data policy or governance frameworks
• Understanding of cloud development
• Understanding of how to scale application security and/or software assurance
• Familiarity with vulnerability classification frameworks (e.g., OWASP Top 10, CVSS, MITRE CVE)
• Experience in threat detection solutions or threat hunting activities.
• High level understanding of penetration testing principles, tools, and techniques
• Experience in project management.

What We’ll Give You

• A team of very skilled and diverse personnel across the globe
• Exposure to mind blowing large-scale cutting-edge systems
• The resources of a large, global operation while still having the small, start-up feel of a smaller team day to day
• Develop new skills and competencies working with our vast cloud product offerings
• Ongoing extensive training and skills development to further your career aspirations
• Incredible benefits and company perks
• An organisation filled with smart, enthusiastic, and motivated colleagues
• The opportunity to impact and improve our systems and delight our customers

Manage a team that is responsible for the information security function, including but not limited to information technology security controls and architecture, information privacy, incident response/investigations and digital forensics, disaster recovery and business continuity, regulatory compliance, communication and training for information security initiatives.

Manages a team maintaining and/or implementing information security policies and procedures. Manages the development, deployment and execution of controls and defenses to ensure the security and risk mitigation of company infrastructure technology and information systems. Identifies security architecture, goals, objectives and metrics; analyzes business needs and priorities for protection of critical systems. Manage security programs and assurance, e.g. threat and vulnerabilities management, incident response management, management of forensic investigations. Evaluates potential business impacts from security breaches and provides guidance to business decision-makers. Develops and executes security systems compliance policies and procedures. Selects, develops and evaluates personnel to ensure the efficient operation of the function.

Minimum 7 years experience in the Information Security field required. Preferred but not required qualifications include: Bachelor-level university degree in a relevant field from an accredited university, or equivalent. 3 or more years of successful management experience including 1 or more years as a first level manager.