Security Solution Architect

Role:- Security Solution Architect

Job Description

· 7 to 10 years of technology work experience with a minimum of 6 years in Information Security

· In-depth knowledge and experience in information security risk assessment and management

· Experience in the development and implementation of application and solutions

· Experience in MAS technology related guidelines such as Technology Risk Management Guidelines, Outsourcing guidelines etc.

· Experience in working and liaising with auditors to review and assess the control framework

· Good understanding of key security technology such as identity access management solution, two factor authentication, enterprise certificate authority etc.

· Passion to deliver sustainable security solutions and continued improvement in control and risk mitigation

· Demonstrate ability to balance business and security requirements and manage tactical vs. strategic on-going initiatives

· Demonstrate ability to operate in diverse environments and cultures and enjoys working in challenging and fast-paced environment

· Discipline in timely submission and reporting key metrics and status

· Strong communication and presentation skills to wide and diverse audiences

· Security certification in CISSP, CISM or CISA is a must; certification in architecture is a plus

Resource responsibility

· Develop the technical application security program to guide the secure development of technology platforms

· Analyze business and operations initiatives to identify the business and application security risks, review the specified requirements and assess the control implementations to ensure information security risks are managed

· Design and deliver innovative security solutions and initiatives and manage and support security technology platforms

· Review vulnerability assessments and penetration testing to assess the residual risks and mitigation plans

· Assess and advise Technology Solution Delivery and Operations teams on management and mitigation of security exceptions and deviations

· Establish an application security awareness program to inculcate a secure development culture to minimize defects and improve time to market

All your information will be kept confidential according to EEO guidelines.