Infrastructure Security Switzerland

JOB SUMMARY:
Reporting directly to the Global Head Security Architecture Engineering, this role serves as an IT security expert for the Enterprise. The role is critical to helping organization secure its information assets, meet industry regulations and develop security policy, across application development, database design, data and application integration. The role requires a holistic approach to enterprise IT security with business minded sense of the amount of risk mitigation relative to the investments of money and effort.

Work closely with enterprise architects and solution architects, other functional area architects and security architects and experts to define security reference architecture and roadmaps which ensure adequate security solutions are in place across all IT systems and platforms to mitigate identified risks sufficiently, and to meet business objectives and regulatory requirements. Key areas are integration security including but not limited to Identity Access Management and Application Data Encryption and Tokenization.

KEY RESPONSIBILITIES
Primary responsibilities are to:
Develop the Security reference Architectures, the security architecture patterns, the security architecture principles and advise on key projects:
Assess and advise on large projects in the design and required patterns for security based on application risk profile
Develop the business, information and technical artefacts that constitute the enterprise information security architecture and solutions focused on application integration, application security in the cloud and application/data encryption.
Evaluate and develop secure solutions, based on approved security architecture.
Aligns security governance with architecture governance and project/portfolio management.
Analyses the business impact and exposure, based on emerging security threats, vulnerabilities and risks and to communicate relevant security risks and solutions to business partners and IT staff
Serves as a security expert in application development, application deployment database design, helping project teams comply with enterprise and IT security policies, industry regulations, and best practices.
Provide advice to CISO. CIO and IT Board on technology issues, trends, and leading practices.
Strongly promote and advocate Security Architecture principles and practices.
Recognize and leverage formal and informal opportunities for Security Architecture to positively influence IT strategy, operations, organization, and processes enterprise-wide
Set strategies and direction to achieve long-term Global IT security objectives.
Act as communication and coordination channel through interactions with Corporate and Divisional Enterprise Architecture organizations and leaders.
Work effectively across technology domains directly supporting and contributing to security objectives.
Research, design and advocate new technologies, architectures and security products that will support security requirements for the enterprise and its customers, business partners and vendors. Improve platform and standards life cycle management.
Increase utilization and alignment of IT investment priorities with risk mitigation objectives.
Develop people, teams and the IT organization to realize a higher level of performance, success, and strategic Business partnership.