Director Security Architecture

The Security Architecture Lead sets Security Architecture strategy in collaboration with the IT Security Head and executes the strategy through oversight of Olympus Security Architecture personnel and managed service providers. This position is responsible for ensuring the secure design and compliance of enterprise architecture to effectively and securely support the organization in meeting specific business technology needs. This candidate will lead architecture design reviews to evaluate security controls and identify opportunities to enhance the security posture of the Olympus business environments, build relationships with infrastructure architects and engineering leads to disseminate and explain secure design methodologies and policies. Ideal candidates will also understand the landscape and components of cutting-edge architectures and the methods to securely deploy  them.

In addition, this position will partner with a region and be the key contact for the regional CIO and local business. They will be the point person for coordinating any necessary regional incidents, information security & privacy meetings and ensure any regional needs are addressed appropriately with the IT Security team. They will facilitate understanding of local/regional laws and regulations that need to be followed. 

• Define and review Olympus Security Architecture strategy, architecture, processes and controls.
• Identify and define architecture security requirements by evaluating Olympus business strategies and requirements.
• Communicate with managed service provider Security Architecture lead(s) and Olympus regional teams about process, people and technology requirements and changes related to Olympus.
• Review and approve the HLD and LLD Security Architecture requirements for LANs, WANs, VPNs, routers, firewalls, and other security tools including cloud infra designed or managed by managed service providers at a global level.
• Review proof of concept results and Security Architecture for any proposed or pipeline security solution along with managed service provider Security Architecture lead(s).
• Lead the adoption of Security Architecture initiatives in order to effectively and securely support the organization in meeting specific business technology needs.
• Drive consideration of cybersecurity tools and datasets to enhance detective and preventative control sets.
• Execute and improve on Olympus’ Security architecture review process and ensure compliance for all business initiatives.
• Architect global programs that deploy strong security patterns and controls across applications and computing environments, while addressing security, business resiliency, privacy and compliance frameworks.
• Validate reference architectures for security best practices and recommend changes to enhance security and reduce risk, where applicable.
• Partner with a regional CIO to be key contact for security initiatives, understanding and supporting regional business requirements and represent the global security team in Information Security & Privacy and other business meetings.
• Oversee Security Architecture Projects in all regions (across sales, enterprise, and manufacturing environments.
• Interview and hire Security Architecture Sr. Security Architects across regions to serve as the Security Architecture operational team in collaboration with managed service providers.
• Overseeing Security Architecture full-time personnel, part-time personnel, and third-party service providers.
• Other responsibilities / duties as assigned.

Required:

• A minimum of a Bachelor’s degree in IT/ Information Systems/ Business/ Technology.
• Should hold at least one of the major security certifications (ex: CISM, CISSP, CISA, CRISC, CCSP, CISSP-ISSAP, GPEN, GICSP, GRID, SABSA, CNDA, CRTSA, GDSA etc
• Minimum of 10 years of Leadership and/ or Management experience.
•  At least 10 years of experience with: 
  • Securing traditional enterprise IT, manufacturing, and cloud infrastructure.
  • Evaluating and implementing security technologies.
  • Defining security requirements to secure enterprise infrastructure.
  • Implementing and operating secure architectures through people, process and technology controls.
  • Internally and externally recognized subject matter expert that influence the way things are done. 
  • Demonstrated consulting skills, with IT Security concepts and strategies, including communication, culture change and performance measurement system design.

Preferred:

• Embrace and lead change effectively and cultivate an environment of security driven thinking, innovation, experimentation, rigor and continuous improvement.
• Results oriented, high energy, inspirational and self-motivated leader.
• Strong interpersonal and motivational skills.
• Strong analytical skills. 
• Excellent written, verbal communication and presentation skills with ability to effectively communicate with leadership team. 
• Multilingual communication preferred.