Director, Information Security Engineering and Architecture

Atlas Air•White Plains, NY

9d•$191,000 - $258,000

About The Position

This position is responsible for providing strategic leadership and technical vision in developing and maintaining Atlas Air’s information security architecture, infrastructure, and engineering initiatives. A highly visible role interfacing with multiple internal and external teams, this role combines strategic planning and technical expertise to drive the evolution of the company’s cybersecurity program.

Requirements

Bachelor’s degree or relevant work experience required.
10+ years of progressive experience in information security, with at least 5 years in an architecture or engineering role
7+ years in a team lead, manager or similar leadership role in cybersecurity or app security.
Demonstrated technical prowess, along with proven experience leading high-performing cybersecurity teams
Proven track record of leading and delivering complex security initiatives
Experience with security major cloud platforms (AWS, Azure, GCP) and hybrid network environments.
Proficient in threat modeling, application security, Identity and Access Management, and risk management
Well-versed with application security tools, public cloud providers, CI/CD platforms and container services
Successful track record of hiring and retaining cybersecurity professionals and multi-team collaboration
Able to direct teams and be actively aware of workload, timelines and obligations without micromanaging
Experience managing annual cybersecurity budgets with expenses for internally developed, commercial and third-party tools
Exemplary communication and leadership skills
Must be able to translate technical security concepts into lay terms
Must be comfortable presenting in front of technical and non-technical audiences

Nice To Haves

Experience in aircraft cybersecurity desired but not required
Understanding of NIST standards for Information Security strongly desired
One or more of CISSP, GCSA, CSSLP, SABSA or similar security certifications desired but not required

Responsibilities

Leads a team of highly experienced individual contributors and technical managers including hiring, career development and performance reviews with a focus on enhancing leadership effectiveness
Provides leadership, mentoring and coaching for all staff and fosters a culture of accountability, innovation and team building
Forms part of the Extended Technology Leadership team and works collaboratively across the group
Establishes and maintains security architecture principles, standard, and patterns that enable secure-by-design practices across the enterprise
Provides leadership and influences cybersecurity strategy across the product portfolio
Provides a holistic focus across infrastructure, application security, vulnerability management and third-party partnerships and dependencies
Drives the technical vision and roadmap for information security solutions across cloud and on-premise environments
Oversees the Aircraft Cybersecurity program
Partners with enterprise infrastructure, development teams, and business stakeholders to integrate security requirements into technology initiatives
Develops partnerships aimed at improving product security practices and reducing cost
Evaluates emerging security technologies and trends and recommends solutions to advance the company security posture
Manages the Information Security operational and capital budgets including forecasting and reporting of fiscal performance for domain of responsibility. Ensures that the proper investments are made with regards to a multi-year view but is adaptable in a rapidly changing environment
Manage relationships with key security vendors, partners, and regulators
Evolves architectural design through awareness of existing ecosystem and pain points (performance, financial, scalability) to deliver a positive impact
Translates business needs into Architectural requirements and estimate the financial impact of alternatives
Develops and implements training and succession plans to develop internal staff and expand technical and leadership capacity within the team
Performs other duties as assigned