CORPORATE VICE PRESIDENT

New York Life•New York, NY

12h•Remote

About The Position

The Corporate Vice President will help architect, deploy, and operate secure cloud application infrastructure aligned with business needs. The role supports operational innovation and provides security direction to strengthen the company’s security posture in cloud computing environments. It helps deliver applications at scale and with resiliency, assesses evolving threats, and develops secure, resilient enterprise cloud processes in collaboration with architects and system engineers. The position secures applications and computing environments across public, private, and hybrid clouds; maintains compliance with corporate privacy, security, business resiliency, and compliance frameworks; and oversees security systems, configurations, identity and access management, and remediation efforts. It also advises on secure application and infrastructure configurations, manages vendor-related security risk, documents and escalates weaknesses, and participates in change, project, and incident response activities. The role is fully remote from anywhere in the U.S., with travel to New York Life’s New York headquarters approximately three days per quarter. The offered base wage is $270,000 per year. The position is exempt from overtime and is not eligible for discretionary or sales bonuses; employees may also be eligible for an incentive program.

Requirements

Bachelor’s degree in cybersecurity, information technology, computer science, or a related field, or foreign equivalent.
Five years of experience as a Corporate Vice President - Cloud Security Engineer or in a related cybersecurity occupation as a practitioner and in security and systems administration across SaaS, IaaS, and PaaS cloud infrastructure.
Five years of experience using AWS, Microsoft Azure, and VMware in a regulated banking or insurance environment.
Experience deploying CI/CD tools, testing automation, application security, container engines, and container orchestration tools.
Experience with networking and encryption, including VPNs, IPsec, SSL/TLS, LDAP, and PKI.
Experience with cloud security solutions such as Wiz and endpoint security tools such as SentinelOne.
Experience using security log tools such as AWS CloudTrail.
Experience writing Infrastructure as Code languages, including Terraform.
Experience using threat intelligence services in a production environment.
Experience achieving compliance with frameworks such as ITIL, NIST, CSA, or ISO.
Experience implementing incident response, system configuration, vulnerability management, and hardening guidelines.

Responsibilities

Help architect, deploy, and operate secure cloud application infrastructure aligned with business needs.
Support operational innovation and provide security direction to improve the company’s cloud security posture.
Help deliver applications at scale and with resiliency to support business initiatives.
Assess the threat landscape and adapt security measures to protect the business from risk.
Develop and maintain secure, resilient enterprise-grade cloud processes with architects and system engineers.
Secure business applications and computing environments across public, private, and hybrid cloud infrastructures.
Protect applications in compliance with corporate privacy, security, business resiliency, and compliance frameworks.
Maintain a consistent, secure environment using configuration management solutions such as Puppet, Chef, and Ansible.
Oversee security systems and security configuration administration to reduce risk to enterprise systems and accounts.
Deploy identity and access management controls across applications and computing environments.
Attend technical project and implementation meetings and advise on secure application and infrastructure configurations.
Monitor and assess emerging threats and recommend tactical and strategic initiatives to address risks to cloud environments.
Manage remediation efforts arising from security assessment findings.
Document, formulate, and enforce security improvements that balance risk with business operations and efficiency.
Oversee cloud vendors and solution providers to safeguard against external risks.
Escalate discovered weaknesses to security management and business unit leads.
Stay informed about current and proposed security changes affecting regulatory, privacy, and security best practices.
Apply knowledge across key business lines, products, practices, and procedures.
Participate in incident response, track occurrences and resolutions, document and report strictly, and engage with security operations and incident response teams.
Attend and fully engage in change and project management meetings.