Sr Dir Security Architecture & Engineering

Hertz•Atlanta, GA

About The Position

The Infosec Sr Director of Security Architecture and Engineering is a member of the IT Security team reporting to the Chief Information Security Officer. The main objective of this role is to organize and lead a team of professionals that will architect and implement security technologies supporting the established controls and frameworks. Additionally, this person will be responsible for leading the engagement with the technology organization and will oversee a team of architects and engineers who will actively pursue the maturation of the application security program.

Requirements

Bachelor’s degree in business or information technology and/or 12+ years equivalent experience, CPM, MBA a plus.
Demonstrated ability to manage complex programs
12+ years of relevant experience in a related role with overall IT experience in a broad range of roles, and working with IT shared services
12+ years’ experience managing complex IT personnel, projects or initiatives and/or IT support departments
10+ years of managing direct and remote organizations
Deep expertise in cloud security concepts, technologies, and best practices including encryption, network security, and databases
Strong understanding of SDLC principles and practices, with experience integrating security into Agile, DevSecOps, and other software development methodologies.
Strong knowledge of application security principles, tools, and techniques including static analysis, dynamic analysis, and runtime protection
Experience working with regulatory compliance frameworks
Strategic thinking with the ability to translate business requirements into effective security solutions and initiatives
Strong leadership and people management skills, with a track record of building and leading high-performing teams
Executive presence using influence as key skill of gaining momentum and importance of programs
Strong level of judgement, leadership and decision making
Strong knowledge of the IT business environment & requirements
Strong interpersonal, motivation and influencing skills - able to interact effectively and influence at all levels of the organization
Negotiation and problem resolution skills
Planning & organizational skills
Extremely strong written and oral communication skills
Strong quantitative and analytical skills
Demonstrated executive level competence and achievements
Possess business process expertise and technical understanding of IT and impact on the business.
Strong perspective, understanding, and sensitivity towards company business issues.
Results-oriented leadership and facilitation capabilities.
Creativity, flexibility, and analytical skills to facilitate solutions for a win-win outcome.
Speed and responsiveness in the resolution of issues.
Ability to challenge the status quo
Natural leadership ability and strong work ethic.
Strong relationship-building skills.
Strong project management skills.
Proven track record of surpassing objectives and delivering exceptional results.
CISP, CISM, CISA Certifications. ITIL Certification a plus
BPM, Six Sigma, TQM experience a plus

Responsibilities

Develop and execute a comprehensive security architecture strategy aligned with business objectives, regulatory requirements, and industry best practices.
Lead the design and implementation of security controls and frameworks to protect cloud and on-prem environments.
Oversee the secure SDLC process, integrating security best practices into all phases of software development, from design to deployment.
Manage the application security program, including vulnerability assessments, code reviews, and penetration testing, to identify and remediate security risks in software applications.
Collaborate with cross-functional teams to ensure that security requirements are incorporated into system and application designs, architecture, and implementations.
Provide technical guidance and leadership to security architects, engineers, and developers, fostering a culture of security awareness and accountability.
Stay abreast of emerging security threats, vulnerabilities, and technologies to continuously adapt security architecture and engineering practices.