CloudSec Cloud App & AI Security Manager

Position responsibilities

Percent of Time: 100%

• Manage a small group of ICC engineers to ensure day-to-day responsibilities are met
• Report back to the Head of Cloud and Application Security regarding accomplishments or challenges
• Define cloud-based security standards and work with the DevOps team to ensure they are integrated into the IAC code framework/pipelines
• Collaborate with application developers and database administrators to deliver creative solutions to difficult technology challenges and business requirements
• Responsible for the thorough documentation of implementations via technical documentation and run books
• Provide input and feedback on security architectures
• Provide subject matter expertise on information security architecture and systems engineering to other IT and business teams
• Interpret security and technical requirements into business requirements and communicate security risks to relevant stakeholders ranging from business leaders to engineers
• Automate security controls, data, and processes to provide improved metrics and operational support
• Implement the concept of Least Privilege and monitor excessive privilege with new Entitlement Management tools
• Employ cloud-based APIs where suitable to write network/system level tools for safeguarding cloud environments
• Stay abreast of emerging security threats, vulnerabilities, and controls
• Investigate, create, and recommend innovative technologies or other methods that will enhance the security of Zoetis cloud-based environments
• Ensure compliance with relevant corporate policies and specific country regulations relative to local data privacy restrictions
• Partner with internal teams and support vendors

Organizational relationships

• Reports to the Head of Cloud and Application Security
• Daily interaction with various groups within ZTD

Education and experience

Education:

• University Degree in Computer Science/ Information Systems/Business Administration or a science-related field is required
• MS or advanced security/identity courses or other applicable certifications (Azure and AWS Cloud Certification, CISSP, etc.) are desirable

Experience:

• Minimum 10+ years of experience in Information Technology
• 5–8 years of experience in IT with a security background
• 1–3 years of managing a team of technical engineers
• 3–5 years of experience working in the corporate information cloud security space
• Experience implementing or supporting Cloud Based Security solutions like Wiz, Azure Security Center, Snyk, Log Analytics, Azure Monitor, CloudHealth, Entitlement Management tools, AWS CloudTrail, etc.
• Expertise in platform security, administration, and management of Azure Active Directory (especially service principals, app registrations, managed identities, and service accounts)
• Hands-on, coding level experience with technologies such as Terraform, PowerShell, Python, and Chef
• Experience with troubleshooting and debugging tools such as Splunk, Azure Sentinel, tracert/traceroute, log analytics, nslookup, nmap, Wireshark
• Experience with large-scale IT projects and how the various roles work together to ensure success
• Experience working in the pharmaceutical or other regulated industries
• DevOps know-how building and deploying infrastructure with cloud deployment, build and test automation technologies like Terraform, Chef, Docker, GitHub Actions, Azure DevOps, etc.

Technical skills requirements

• Highly developed communication and interpersonal skills with the ability to influence through personal credibility, integrity, and professionalism
• Excellent written and oral communication skills
• Relentless dedication to Customer Excellence
• Strategic thinking and analytical skills
• Ability to multitask and work in a fast-paced environment
• Ability to foster collaborative decision-making
• Capable of working both independently and as a team member
• Fluency in English (written and spoken) is a must
• Excellent interpersonal and leadership skills, with the ability to work in a matrix organization, managing multiple stakeholders that include Business Units, Functional Leaders, and their teams

Communication Skills:

• Must be fluent in both written and oral English, with the ability to communicate effectively across technical and non-technical audiences

Physical position requirements

• Availability to work between 1pm IST to 10pm IST hours (minimum 4 hours of daily overlap with US Eastern Time Zone)
• Full-time