About the Organization
The Technology Management Division is responsible for enterprise technology governance, corporate IT services, cybersecurity operations, privacy oversight, and strategic technology management. The division enables innovation while maintaining a secure and resilient technology foundation across a large-scale global business ecosystem.
Within the division, the Information Security Supervisory Department oversees cybersecurity, data protection, privacy governance, and security operations. The organization works to safeguard digital assets, customer data, and business services through proactive defense strategies and operational excellence.
Department Overview
The Cyber Security Defense Department is dedicated to protecting global digital services, infrastructure, and users against evolving cyber threats. The department manages both security engineering and security operations functions, supporting secure development practices and operational resilience across a worldwide technology environment.
Security teams and operational centers are distributed across multiple regions, enabling continuous protection, monitoring, and response capabilities on a global scale.
Why This Role Exists
As the organization continues to expand its global technology ecosystem, cybersecurity capabilities must evolve to counter increasingly sophisticated threat actors. This role is being added to strengthen proactive defense strategies, increase resilience, and embed security into every stage of platform development and operations.
Team Mission
Deliver comprehensive cybersecurity capabilities by integrating security into platform design, development, and operations while protecting critical production environments and ensuring the resilience of global services.
Position Overview
We are seeking a hands-on and strategic cybersecurity leader to manage a Platform Security team responsible for protecting hybrid infrastructure environments spanning public cloud and private cloud platforms.
The successful candidate will lead security engineers, drive security-by-design initiatives, oversee operational defenses, and maintain the overall security posture of mission-critical infrastructure supporting global services.
Key Responsibilities
Security Strategy & Governance
- Define and execute platform security strategies across hybrid infrastructures, including public cloud and private cloud environments.
- Establish roadmaps that improve the overall security posture of enterprise platforms and services.
Team Leadership
- Lead, mentor, and develop a team of security engineers.
- Manage service delivery, resource allocation, operational priorities, and budgets.
Infrastructure Security
- Design and oversee the implementation of foundational security controls, including:
- Identity and Access Management (IAM)
- Network Security Controls
- Security Guardrails
- Preventive and Detective Security Measures
Threat Detection & Response
- Partner with Security Operations Center (SOC) and Threat Intelligence teams to defend critical systems against cyber attacks.
- Drive security monitoring, threat hunting, and incident response programs.
- Ensure timely response and recovery from security incidents.
Security Operations Excellence
- Oversee vulnerability management programs and remediation activities.
- Coordinate response efforts for critical vulnerabilities and zero-day threats.
- Improve operational resilience across cloud and infrastructure environments.
Organizational Security Improvement
- Define and monitor security KPIs and metrics.
- Develop cybersecurity talent and enhance organizational cyber maturity.
- Contribute to broader cybersecurity resilience initiatives across the business and industry.
Required Qualifications
Experience
- 7+ years of professional experience in information security.
- Demonstrated hands-on cybersecurity experience in one or more of the following areas:
- Cloud Security
- Infrastructure Security
- Vulnerability Management
- Security Monitoring & Incident Response
- Minimum 3 years of people management experience, including ownership of team delivery and budgets.
- Experience implementing preventive and detective security controls in public cloud and/or private cloud environments.
- Experience working with geographically distributed teams across multiple time zones.
Technical Knowledge
- Strong understanding of cloud platform security concepts.
- Deep knowledge of web and mobile application architectures.
- Strong understanding of software vulnerability management and remediation lifecycles.
- Practical experience handling vulnerability management programs and zero-day response activities.
- Strong understanding of networking fundamentals and web application protocols.
Leadership & Communication
- Strong stakeholder management capabilities.
- Excellent communication, consulting, and problem-solving skills.
- Ability to build consensus and trusted relationships across technical and business teams.
- Demonstrated ownership, accountability, and leadership in fast-paced environments.
- Strong collaboration skills within diverse, cross-functional teams.
Preferred Qualifications
- Experience supporting large-scale global infrastructure environments.
- Knowledge of Zero Trust architecture and modern security frameworks.
- Experience implementing security controls within globally distributed networks.
- Software engineering or web service development experience.
- Experience building and operating cloud-native infrastructure environments.
- Experience working within diverse and multicultural organizations.
- Vendor management and cybersecurity product strategy experience.
- Experience supporting compliance initiatives such as:
- PCI DSS
- FISC
- Industry certifications such as:
- CISSP
- Security+
- GIAC
- SSCP
- OSCP
- OSCE
