Major accountabilities:

• Developing and maintaining security roadmaps and strategy, working with various other security domain architects to align technology and service roadmaps
• Driving new technology/product/solution evaluations, providing leadership in the identification of specific security technology standards for Public Cloud technologies
• Wearing the ‘engineering’ hat regularly, driving product/solution Proof of Concept with other security architects/engineers
• Identifying and leading your team to develop new security design patterns and participating on our Security Technical Design Authority
• Driving and defining required Threat Modeling methodologies & related tools for Cloud hosting environments
• Being our expert on Cloud and Infrastructure platform security topics and identifying major cloud security related deficiencies, then designing pragmatic approaches on how to remediate them at scale
• Reporting on cloud security posture status across company periodically and is responsible for maintaining a clear risk acceptance/remediation level

Minimum Requirements:
Work Experience:

• 8+ years of relevant professional IT experience in the related functional area, with a solid understanding of IT infrastructure technology, systems and management processes in a regulated industry
• 4+ years of experience as an Information Security Architect
• 2+ years experience working with AWS or Azure security architect (IaaS/PaaS)
• 2+ years working experience in DevOps/DevSecOps models
• Experience of sourcing complex IT services, working closely with vendors and making full use of their abilities
• Demonstrated ability to build and maintain successful relationships with senior leaders from risk or non-risk/IT or non-IT backgrounds and ability to successfully manage projects involving multi-functional teams in a matrixed environment

​Nice to have:

• 5+ years of experience of working in or providing IT services to a large enterprise like Novartis
• Relevant certifications:
  -Security related certifications: Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP),ISO 27001 Lead Implementer
  - Technology related certification: AWS Certified Solutions Architect - Professional, AWS Certified Security - Specialty, Microsoft Certified: Azure Solutions Architect Expert

Languages :

• Proficiency in English (written & oral).