Manager-Cloud Security/CNAPP

Health Care Service Corporation•Chicago, IL

10d•$102,000 - $184,300•Hybrid

About The Position

This position is responsible for leading a Cloud security engineering and operations team, and collaborating with Solutions Engineering, Infrastructure Operations, and Infrastructure Service Management teams in the design and build of secure cloud infrastructure solutions/blueprints for area of responsibility; leading the secure by design build of repeatable patterns (build-kits); leading the life cycle management for the technology area of responsibility; transitioning knowledge to Infrastructure Operations; lead level 3 support for area of responsibility when required. In addition to the managerial duties, the incumbent will also provide technical expertise and leadership in the formulation and execution of secure cloud architecture across the organization. Developing processes, procedures, policies and standards for cloud and automation security services; designing, building, and driving the implementation of cloud security management tools for the organization.

Requirements

Bachelor’s degree in IT, Engineering, Computer Science or closely related field and 6 years in Information Technology with focus on Cloud Security and Orchestration building and managing platforms in the cloud (AWS/Azure) OR 10 years of experience in Information Technology with focus on Cloud Security and Orchestration building and managing platforms in the cloud (AWS/Azure).
3 years experience in Cloud security, Technology and automation.
1 year experience in Information Security management and/or leadership.
Knowledge of cloud native technologies, cloud security controls and As a Service technologies.
Deep understanding of CNAPP capabilities including: Cloud Security Posture Management, Cloud Workload Protection Platform, Cloud Infrastructure Entitlement Management, Kubernetes Security Posture Management, Data Security Posture Management, Vulnerability management and scanning, Container and orchestration security, Integrating security into CI/CD pipelines, Infrastructure-as-Code and IaC security scanning.
Identity and Access Management across cloud platforms.
Familiarity with SAST, DAST, SCA, secrets scanning, API security and SDLC.
Network security, encryption, zero-trust architecture.
Threat detection, incident response, and vulnerability management.
Knowledge of frameworks and standards: NIST, CIS Benchmarks, ISO 27001, SOC 2, PCI-DSS, HIPAA, FedRAMP.
Cloud compliance and audit support.
Policy development and enforcement.
Defining cloud security strategy, roadmap, and budget.
Risk assessment and communication to executives/stakeholders.
Vendor management and tool evaluation/procurement.
Strong written and verbal communication.
Experience monitoring, utilizing event management and automation technologies.
Ability to simplify & standardize complex concepts / processes and drive cross functional execution.
Understand and anticipate business priorities, trends and markets.
Ability to prioritize and make trade-off decisions.
Adaptability and ability to introduce / manage change.

Nice To Haves

Master’s degree in Cybersecurity, Information Technology, Engineering, Computer Science or closely related field.
Relevant cybersecurity, cloud and service management certifications (e.g, CCSP, CKSP, CISSP, ITILv3) are highly desirable.
Operations Management experience.
Experience with Network and Voice, e.g. Network (data and voice) technologies, Software Defined Network, etc.
Experience with Distributed Software, e.g., Web Server (Apache, IIS, and other HTTP Servers), Application Server (WebSphere, Tomcat, Open Stack).
Experience with Third party supplier management.
Experience with PMO structures, processes, and methods.
Experience with Demand / Portfolio and Resource Management.

Responsibilities

Leading a Cloud security engineering and operations team.
Collaborating with Solutions Engineering, Infrastructure Operations, and Infrastructure Service Management teams in the design and build of secure cloud infrastructure solutions/blueprints.
Leading the secure by design build of repeatable patterns (build-kits).
Leading the life cycle management for the technology area of responsibility.
Transitioning knowledge to Infrastructure Operations.
Lead level 3 support for area of responsibility when required.
Providing technical expertise and leadership in the formulation and execution of secure cloud architecture across the organization.
Developing processes, procedures, policies and standards for cloud and automation security services.
Designing, building, and driving the implementation of cloud security management tools for the organization.
Hiring, mentoring, and performance management of a cloud security team.