Cybersecurity - Director Enterprise Security Architect

Profile

At Bristol Myers Squibb, we are inspired by a single vision - transforming patients' lives through science.In oncology, hematology, immunology and cardiovascular disease - and one of the most diverse and promising pipelines in the industry - each of our passionate colleagues contribute to innovations that drive meaningful change. We bring a human touch to every treatment we pioneer. Join us and make a difference.

Position Summary:

As part of the Cybersecurity organization, the Director, Enterprise Security Architect is responsible for ensuring security by design through the establishment of security architecture standards and patterns for the design of systems and infrastructure. This position will also include thought leadership and design influence as part of an Enterprise Architecture board. The ideal candidate will have a drive to succeed as a valuable member and leader of our Cybersecurity architecture team. Excellent communication skills, a desire to thrive, learn and improve, while staying on top of technology advancements are strongly desired.

Responsibilities:


Design enterprise-class security systems for business applications including SaaS, PaaS, IaaS and on-premise environments
Align security standards, reference architectures, patterns and frameworks with overall business and technology strategy
Using Threat Modeling, identify and communicate current and emerging security threats to systems and infrastructure
Design security architecture elements to mitigate threats as they emerge
Create security solutions that balance business requirements with regulatory and cyber security requirements
Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
Provide technical security leadership and act as subject matter expert providing architecture advice during and after security events
Perform other system, network and infrastructure security duties as needed or required


Desired Experience Required:


Experience with security standards and frameworks such as NIST, CIS, ISO 27001
Experience designing and implementing security solutions to comply with regulations such as GDPR, CCPA and HIPPA
Experience with API, web services, SAML, OAUTH, SSO and federation technologies
Hands-on implementation experience deploying security solutions including firewalls, intrusion detection, WAF, access controls, etc.
Deep knowledge of network protocols and network security designs including NAC, Web Proxies, IDS/IPS, SDWAN, DNS, DHCP, DMZ architectures, cloud services and VPN technologies
Strong knowledge of cloud security concepts and practices including experience securing platforms such as AWS, Azure, GCP, SAP HANA, Salesforce
Knowledge of server infrastructure security for Windows and Linux Server operating systems, SAN, Storage, RDBMS and other data center technologies
Knowledge of data protection concepts including encryption, masking, key management, rights management, localization, privacy, DR and backup
Knowledge of identity management systems, Microsoft Active Directory, gateway technologies and SSO solutions


Ideal Candidates Would Also Have:


Exceptional communication skills with diverse audiences - Strong critical thinking and analytical skills
Strong leadership, project and team-building skills, including the ability to lead teams and drive projects and initiatives in multiple departments
Demonstrated ability to identify risks associated with business processes, operations, information security programs and technology projects
The ability to be the enterprise security subject matter expert who can explain technical topics to those without a technical background


Other Qualifications:


Bachelor's degree and security certifications including CISSP, ISSAP, ISSEP, CCSE, AWS Architect, AWS Security, CCSP, GIAC are a plus.
A Master's degree in an IT field or cybersecurity is a plus.


Around the world, we are passionate about making an impact on the lives of patients with serious diseases. Empowered to apply our individual talents and diverse perspectives in an inclusive culture, our shared values of passion, innovation, urgency, accountability, inclusion and integrity bring out the highest potential of each of our colleagues.

Bristol Myers Squibb recognizes the importance of balance and flexibility in our work environment. We offer a wide variety of competitive benefits, services and programs that provide our employees with the resources to pursue their goals, both at work and in their personal lives.

Company: Bristol-Myers Squibb

Req Number: R1527262_EN

Updated: 2020-07-06 00:00:00.000 UTC

Location: Princeton,New Jersey

Bristol Myers Squibb is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, pregnancy, citizenship, marital status, gender expression, genetic information, political affiliation, or any other characteristic protected by law.

Company info

Sign Up Now - MiamiCrossing.com