Information Security Architect - Houston TX

Profile

115550BR

Job Title:

Information Security Architect - Houston, TX

No. of Positions:

1

Job Description:

The information security architects in Shell are responsible for analyzing our current IT landscape against our IT Strategy, collaborating closely with IRM, SOM, IPPD and business stakeholders to establish the target security architecture and associated roadmaps of activities which will ensure the security of Shell's information assets. Security Architects lead architecture strategy and portfolio development work, establish segment and reference architectures for their assigned portfolios, and champion the development and implementation of security by design and privacy by design initiatives across IT.

The Information Security Architect for ERP is responsible for driving the secure implementation of SAP systems security across Shell. This scope includes all ERP/SAP on-premise components (ECC, HANA, BW, etc.) as well as SAP in the cloud including PaaS and SaaS services (S4HC, Ariba, Concur, SAP Cloud Platform, etc.)

This role is responsible for defining, ever greening and owning the security guidelines and standards for all our ERP systems in line with industry best practices, and any relevant Shell standards. This role will ensure our ERP landscape adherers to established security standards by embedding controls and monitoring/measuring the security of ERP services and components across the enterprise. This role will play a key part of our ERP delivery and operational natural teams. They must maintain an overview of the current state of security of our ERP systems globally, identify any gaps, and coordinate security remediation efforts across the enterprise.

Initially this role will focus on developing and implementing the target security strategy for SAP S/4HANA Cloud and SAP Cloud Platforms, including integration with and within those platforms. However our on-premise landscape must also be addressed in a similar manner. This role will be responsible for ensuring we have a consistent strategy and implementation of ERP security across both our on-premise and cloud estate. This will include activities like documenting the security decisions, targets and rationale in the associated reference architectures, and ensuring the necessary security capabilities and services are implemented within these strategic platforms. The Information Security Architect for ERP must work with IT Engineering, operations and IRM teams to carry out risk assessment/quantification on our existing ERP systems, and establish and implement the necessary ERP security policies and actions based on industry standards and best practices. On-going this role will support the ERP ITM and their natural team to embed the ERP security framework and target architecture, championing the ERP security strategy across the ERP community, and ever greening that strategy and roadmaps in response to new threats or changes to the overall ERP landscape. This architecture role will also oversee and guide any solution architects or architecture work which impacts security across within the ERP landscape.

Accountabilities


In close partnership with the ERP ITM, ERP LT, S4 COE and ERP segment and enterprise architects this role will establish the target ERP security architecture, supporting roadmaps, including needed handrails and standards based on industry best practices.
With the ERP portfolio/product managers, they will support the full lifecycle of the ERP portfolio, from collaborating with ERP leadership on priorities and investment planning, to guiding the delivery of solutions and services across a complex business and technical landscape. Define (with the ERP LT & IRM) a program of prioritized improvements and remediation, and drive delivery of approved projects, with clear accountabilities, governance and stakeholder alignment.
Demonstrate efficient and effective compliance to ERP security standards and requirements. Drive implementation of ERP security standards, prioritizing business critical systems and high-risk issues.
Ensure the implementation of ERP security requirements by Shell and ecosystem delivery teams
Ensuring Shell ERP security requirements are fit for purpose and new vulnerabilities are addressed and prioritized on a risk basis
Work closely with portfolio managers, and other senior ERP & IT stakeholders to identify business needs and value opportunities which contribute to targets and annual plans. Support the ERP LT, IPPD and Architecture LT in the development of annual portfolio reviews and investment planning.
Responsible for the ERP segment and other significant areas of the Shell Information Security Architecture. Must be able to work across architecture, IRM, and ERP delivery and operations teams to understand the unique security challenges, gaps, options, and then lead the development of a pragmatic target security architectures for those areas with accompanying roadmap of activities required to get there. Present business (value) case to ITM and ERP leadership for support, and push through getting the activities properly structured, chartered and launched.
Work with the other security architects and supporting data & process architects in getting all areas of the IRM and Security segment architectures established, roadmaps developed, documented appropriately, and formally agreed with stakeholders and IT leadership.
Work closely with partners in IRM and ERP teams on the development of security procedures and guidelines that support information security policies.
Act as the focal point for ERP information security architect resource demand planning to ensure any ERP security relevant projects have the necessary security architecture resources and support. Support the selection and onboarding of ERP solution architect resources (contract or staff) to enable PoC or project delivery.
Participate in solution architecture design reviews and architecture review boards as needed, and lead security efforts assisting with the integration and initial implementation of business solutions or service developments across the ERP landscapes.
Achieve security architecture compliance on requirements and regulations including global data privacy requirements and regulations within the ERP portfolio. Act as a champion for data privacy across ERP architecture, developing the necessary resources in partnerships to ensure ERP delivery and operate teams are educated on their data privacy responsibilities and have the necessary guidelines they need to be successful.
Serve as an information security subject-matter expert across a wide range of ERP and security topics; provide advisory and consulting services as needed. Establish a virtual network of Center of Excellence around SAP security skills, put in place a robust knowledge management framework and create a sustainable pool of SAP security subject matter experts in Shell to contribute to this COE.
Understand current and emerging security threats and ensure the target security architecture for ERP can mitigate those threats.
Stay abreast of new security technologies from ERP suppliers, and work with the wider security architecture and portfolio teams to integrate them into the security architecture targets and designs where appropriate.


Auto req ID:

115550BR

Skillpool:

IT Architecture Standards & Solutions

Country of Work Location:

United States

Employment Type:

Full Time

Company Description:

Shell is a global group of energy and petrochemical companies with about 84,000 employees across more than 70 countries. We aim to meet the world’s growing need for more and cleaner energy solutions in ways that are economically, environmentally and socially responsible. We have expertise in exploration, production, refining and marketing of oil and natural gas, and the manufacturing and marketing of chemicals. As a global energy company operating in a challenging world, we set high standards of performance and ethical behaviors. We are judged by how we act and how we live up to our core values of honesty, integrity and respect for people. Our Business Principles are based on these. They promote trust, openness, teamwork and professionalism, as well as pride in what we do and how we conduct business.Building on our core values, we aspire to sustain a diverse and inclusive culture where everyone feels respected and valued, from our employees to our customers and partners. A diverse workforce and an inclusive work environment are vital to our success, leading to greater innovation and better energy solutions.

Disclaimer:

Please note: We occasionally amend or withdraw Shell jobs and reserve the right to do so at any time, including prior to the advertised closing date.

Before applying, you are advised to read our data protection policy. This policy describes the processing that may be associated with your personal data and informs you that your personal data may be transferred to Royal Dutch/Shell Group companies around the world.

The Shell Group and its approved recruitment consultants will never ask you for a fee to process or consider your application for a career with Shell. Anyone who demands such a fee is not an authorised Shell representative and you are strongly advised to refuse any such demand.

Shell participates in E-Verify.

All qualified applicants will receive consideration for employment without regard to race, color, sex, national origin, age, religion, disability, sexual orientation, gender identity, protected veteran status, citizenship, genetic information or other protected status under federal, state or local laws.

Shell is an Equal Opportunity Employer - Minorities/Females/Veterans/Disability.

Work Location:

Houston - EP Center Americas

Requirements:


Must have legal authorization to work in the US on a full-time basis for anyone other than current employer.
Bachelor’s degree or equivalent experience in computer science, MIS, or related field preferred.
Minimum of fifteen (15) years overall IT experience with at least ten (10) years of hands-on technical information security experience at enterprise scale.
Extensive and deep subject matter expertise and experience (>10 years) in end-to-end SAP architecture and security (application & back end).
Expert-level knowledge of security principles and technologies. Proven skills to establish and drive strategy for ERP/SAP security.
Knowledge of the Shell Information Risk Management organization, function, priorities, and their processes. Including GRC, L&R, LOD1/LOD2, etc.
Strong, proven problem-solving skills and the ability to identify, analyze, and resolve problems, driving solutions through to completion.
Excellent presentation skills with the ability to translate complex technical information across all levels of the organization.
Strong facilitation skills and a clear ability to build strong relationships with business stakeholders at all levels, including executive managers and suppliers.
Demonstrated ability to lead cross functional teams, delivering high performance and stakeholder satisfaction in a global, matrix-management environment.
Demonstrated ability to translate business drivers and priorities into architecture strategy and targets.
Experience in working across organizations (e.g. Architecture, IRM, ITSO, Suppliers) and influencing and driving diverse groups to decisions and action.
Experience in writing and reviewing Strategy, Architecture and Portfolio artifacts.
Demonstrated experience in designing, building, and supporting many different types of enterprise scale solutions on a wide variety of platforms.
Technical proficiency in security-related hardware and software, forensics and related security systems and tools.
Technical proficiency in broader areas of IT, including Shell Architecture standards (TOE), underlying digital platforms (network hardware/protocols/standards, hosting and storage services), ERP, and end user computing including mobile devices.
Experience leading the architecture and design of IaaS/PaaS/SaaS solutions. In depth knowledge of the services provided by SAP S/4HANA Cloud and SAP Cloud Platform, as well as the other major cloud platforms (Azure, AWS), with an appreciation for their individual architecture and security challenges.
Professional Certifications: SAP Certified Technology Professional - System Security Architect, CISSP, CCSP, GSLC, GSTRT, CompTIA Security .
Technical Certifications: MS Certified Azure Solution Architect, AWS Certified Security - Specialty, AWS Certified Solutions Architect.


City, State (if applicable):

Houston, TX

Company info

Sign Up Now - MiamiCrossing.com