Manage a small group of ICC engineers to ensure day-to-day responsibilities are met
Report back to the Head of Cloud and Application Security regarding accomplishments or challenges
Define cloud-based security standards and work with the DevOps team to ensure they are integrated into the IAC code framework/pipelines
Collaborate with application developers and database administrators to deliver creative solutions to difficult technology challenges and business requirements
Responsible for the thorough documentation of implementations via technical documentation and run books
Provide input and feedback on security architectures
Provide subject matter expertise on information security architecture and systems engineering to other IT and business teams
Interpret security and technical requirements into business requirements and communicate security risks to relevant stakeholders ranging from business leaders to engineers
Automate security controls, data, and processes to provide improved metrics and operational support
Implement the concept of Least Privilege and monitor excessive privilege with new Entitlement Management tools
Employ cloud-based APIs where suitable to write network/system level tools for safeguarding cloud environments
Stay abreast of emerging security threats, vulnerabilities, and controls
Investigate, create, and recommend innovative technologies or other methods that will enhance the security of Zoetis cloud-based environments
Ensure compliance with relevant corporate policies and specific country regulations relative to local data privacy restrictions
Partner with internal teams and support vendors
Organizational relationships
Reports to the Head of Cloud and Application Security
Daily interaction with various groups within ZTD
Education and experience
Education:
University Degree in Computer Science/ Information Systems/Business Administration or a science-related field is required
MS or advanced security/identity courses or other applicable certifications (Azure and AWS Cloud Certification, CISSP, etc.) are desirable
Experience:
Minimum 10+ years of experience in Information Technology
5–8 years of experience in IT with a security background
1–3 years of managing a team of technical engineers
3–5 years of experience working in the corporate information cloud security space
Experience implementing or supporting Cloud Based Security solutions like Wiz, Azure Security Center, Snyk, Log Analytics, Azure Monitor, CloudHealth, Entitlement Management tools, AWS CloudTrail, etc.
Expertise in platform security, administration, and management of Azure Active Directory (especially service principals, app registrations, managed identities, and service accounts)
Hands-on, coding level experience with technologies such as Terraform, PowerShell, Python, and Chef
Experience with troubleshooting and debugging tools such as Splunk, Azure Sentinel, tracert/traceroute, log analytics, nslookup, nmap, Wireshark
Experience with large-scale IT projects and how the various roles work together to ensure success
Experience working in the pharmaceutical or other regulated industries
DevOps know-how building and deploying infrastructure with cloud deployment, build and test automation technologies like Terraform, Chef, Docker, GitHub Actions, Azure DevOps, etc.
Technical skills requirements
Highly developed communication and interpersonal skills with the ability to influence through personal credibility, integrity, and professionalism
Excellent written and oral communication skills
Relentless dedication to Customer Excellence
Strategic thinking and analytical skills
Ability to multitask and work in a fast-paced environment
Ability to foster collaborative decision-making
Capable of working both independently and as a team member
Fluency in English (written and spoken) is a must
Excellent interpersonal and leadership skills, with the ability to work in a matrix organization, managing multiple stakeholders that include Business Units, Functional Leaders, and their teams
Communication Skills:
Must be fluent in both written and oral English, with the ability to communicate effectively across technical and non-technical audiences
Physical position requirements
Availability to work between 1pm IST to 10pm IST hours (minimum 4 hours of daily overlap with US Eastern Time Zone)