Comcast Cybersecurity: VP Security Arch Identity amp Access

Profile

**MEMBERS ONLY**SIGN UP NOW***.'s Technology, Product & Experience organization works at the intersection of media and technology. Our innovative teams are continually developing and delivering products that transform the customer experience. From creating apps like TVGo to new features such as the Talking Guide on the X1 platform, we work every day to make a positive impact through innovation in the pursuit of building amazing products that are enjoyable, easy to use and accessible across all platforms. The team also develops and supports our evolving network architecture, including next-generation consumer systems and technologies, infrastructure and engineering, network integration and management tools, and technical standards. We offer a flexible working environment to balance the need to work independently wherever you choose, with days that require collaboration at one of our offices. Our roles primarily reside inside or around one of our Tech Hubs (Philadelphia and surrounding suburbs, Denver, Austin, Silicon Valley, Washington DC/N. Virginia). Some roles can work virtual full-time if they are not near a Tech Hub, but that is dependent upon the needs of the position and amount of collaboration required.

Job Summary

**MEMBERS ONLY**SIGN UP NOW***. seeks to recruit a Vice President of Security Architecture, Identity & Access Management and IoT Security as one of the key leaders of the company's world class information and product security team. This leader will be responsible for building and leading a very technically talented and diverse team who work across one of the world's largest broadcasters, telecommunications and internet service providers to ensure its 189,000 employees have the appropriate access to the company's data and systems, that the company is a wise and responsible steward of its clients' and customers' data and that its half million connected devices are secure. This new leader will succeed an executive who is planning on retiring after a successful tenure and will immediately be a part of the leadership team of the world class security program that Ms. Davis and the team have cultivated for the past seven years. As operators of one of the world's most extensive and high-volume data networks, **MEMBERS ONLY**SIGN UP NOW***. has developed one of the world's largest public key infrastructures (PKI) to enable the secure transfer of digital information (customer and client information, business intelligence, legal data etc.) internally and externally. Another cutting-edge team under this leader is one of the world-leading de-identification practices, using sophisticated encryption and other techniques to ensure customer data is responsibly managed, protecting both **MEMBERS ONLY**SIGN UP NOW***. and its customers. The largest team under this VP is that tasked with ensuring **MEMBERS ONLY**SIGN UP NOW***. colleagues and clients alike have access to the appropriate tools and information in an efficient and secure way. This includes complex privileged access and secrets management systems. Due to the variety and complexity of **MEMBERS ONLY**SIGN UP NOW***.'s businesses, it is critical the program continues to deliver an optimal user experience across these businesses, without compromise on quality and rigor. There is an ongoing desire to continue systems and entitlements rationalization, in pursuit of architectural simplicity and reduced operational risk. This new VP will be a recognized technical subject matter expert in one or more of the role's core domains, while also being an accomplished leader and influencer in a large, complex matrix. They will ensure alignment with divisional business and technology leaders to develop and deliver a modern set of agile capabilities that reduce cost and complexity and enable innovation and critical initiatives such as **MEMBERS ONLY**SIGN UP NOW***.'s leading public key infrastructure (PKI) and de-identification practices. This executive will own the philosophy, practices, and technology to deliver market-leading capability that is frictionless, scalable, and secure. The role will be based out **MEMBERS ONLY**SIGN UP NOW***.'s corporate offices in Philadelphia, or at its Mt. Laurel, NJ location, both under a hybrid work model.

Job Description

Reports to: Noopur Davis, Corporate Executive Vice President, Chief Information Security and Chief Product Privacy Officer

Direct reports: 60 total team members with 5 primary functions:


Public Key Infrastructure - manage about 300 million certifications with device authentication and certificates that has direct oversight of IoT security.

Traditional Identity and Access and Privileged Access - development, testing and production support for entitlement management both for proprietary and off the shelf identity systems. Includes rationalization of systems to deliver consistent, streamlined authentication and improved user experience. This also includes technology and governance to determine standards for separation of duties with proper levels of authentication.

De-identification - manage extensive data sets from **MEMBERS ONLY**SIGN UP NOW***.'s customers and internal business arms to protect the privacy of individuals while maintaining smooth and cohesive operations.

IoT Security - lead the team responsible for securing **MEMBERS ONLY**SIGN UP NOW***.'s half million connected physical devices.

API Gateway


Key Responsibilities:


Global and group-wide responsibility for the framework of policies and technologies that ensure that the right users - both **MEMBERS ONLY**SIGN UP NOW***. employees and its customers - have the appropriate access to data and technology resources to work productively / do business with **MEMBERS ONLY**SIGN UP NOW***. seamlessly.

Bring an understanding of the developer experience as it relates to entitlements management, understanding the connective tissue / inter-dependencies between application entitlements, platform entitlements and user experience.

Develop standards, controls and tools to proactively identify and mitigate risk associated with users gaining illegitimate access to data / systems.

Lead identity and access management (IAM) projects, including those involving authoritative source, identity management, provisioning, authentication, authorization, monitoring and certifications, and auditing and reporting.

Lead the direction and execution of the IAM road map that prioritizes delivery of a modern tools, policies and practices, as well as supports innovation and new business / technology initiatives.

Partner with peers in cybersecurity and technology / engineering to ensure the IAM road map is aligned to the broader information security and technology risk strategy, as well as customized to fit the needs of the respective business lines. Leverage knowledge of various business segments to navigate nuances in operational and technical processes across the respective business lines to anticipate potential roadblocks or challenges.

As required, meet with internal and external auditors, regulators, or the board of directors on IAM topics.

Supervise the implementation of zero trust, role-based access controls (RBAC) and attribute-based access controls (ABAC), including analytical role mining and entitlement analysis.

Lead and continue to evolve the team managing one of the world's leading public key infrastructures (PKI) in the world.

Lead and continue to evolve the capabilities of a small team tasked with the de-identification of one of the corporate world's largest data sets.

Provide oversight with regard to building, configuration, and architecture of identity platforms, such as Sailpoint and CyberArc.

Lead, develop and mentor a diverse and highly technical team.


Desired outcomes:


Improved identity access, privileged access, and access to network capabilities - both in terms of risk metrics and net promoted scores / colleague feedback.

Continued elevation of the identity access and management function so that the team is continued to be seen as a thought partner in proposing new and innovative solutions to the business, thus enabling them to move faster and more nimbly.

Improved user experience for the 189,000 **MEMBERS ONLY**SIGN UP NOW***. employees around the world regarding their ability access the data and systems they need to be productive.

Continued improvement for the onboarding process for clients and customers of **MEMBERS ONLY**SIGN UP NOW***., without compromising standards, controls, or security.

Enable **MEMBERS ONLY**SIGN UP NOW***. to continue its amazing growth path while reducing the risks associated with the collection and retention of customer information.

Delivery of a modern security architecture supporting **MEMBERS ONLY**SIGN UP NOW***.'s responsible stewardship of its data assets.

Ongoing simplification of vendor partnerships in the area of access & management.


The VP of Security Architecture, Identity & Access Management and IoT Security will bring modern technology skills and business acumen to effectively innovate in one of the largest and most complex data environments in the world. The successful candidate will ideally have a background in software engineering and will therefore be familiar with the technical challenges associated with transforming an IAM program whilst migrating to the public cloud. Finally, they will have experience interacting with both technical and non-technical senior stakeholders, and will have operated in large-scale, global environments.

Ideal Experience:

A minimum of ten years of experience in information security or other technical fields such as software engineering.

Ideally in an international, multi-business / product line, regulated company.

Experience managing teams of over 50 world class engineers.

Knowledge of current IAM tools / technologies.

SailPoint, RSA or Oracle for Identity Governance Azure AD, Ping Identity, ForgeRock AM, Oracle OAM, Unbound ID for Access Management CSP Identity and access management on Azure, AWS and GCP.

Experience building and leading large scale public key infrastructures.

Knowledge of common information security management frameworks.

Including: ISO/IEC 27001, COBIT, and NIST, including 800-53 and the Cybersecurity Framework

Significant experience in Java Application Interface Development and Object Models, Federation Protocols

(Oath, SAML, OpenID), and Single Sign On (SSO) models, including Ping

Bachelor's degree in STEM subject from a leading college/university

Ideally majoring in computer science, software engineering, mathematics or similar.

Critical Leadership Capabilities:


Creates or takes advantage of multiple opportunities to promote needed change

Adapts communication content, approach, or style around change to appeal to different audiences

Identifies all necessary stakeholders and connects with them to gain support or agreement

Negotiates with a genuine give-and-take approach that takes all parties' perspectives into account

Anticipates emerging or potential conflicts among all stakeholders and takes steps to pre-empt them

Experience managing cross functional global teams in a matrix environment

Acts to surpass team goals, seizing opportunities to extend the limits of what is possible

Sets continually higher goals for the team that are ambitious but achievable


**MEMBERS ONLY**SIGN UP NOW***. is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other basis protected by applicable law.

Education

Bachelor's Degree

While possessing the stated degree is preferred, **MEMBERS ONLY**SIGN UP NOW***. also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Relevant Work Experience

15 Years

Base pay is one part of the Total Rewards that **MEMBERS ONLY**SIGN UP NOW***. provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, **MEMBERS ONLY**SIGN UP NOW***. provides best-in-class Benefits. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality - to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary (****on our careers site for more details.

Company info

Sign Up Now - MiamiCrossing.com