Manager, Information Security Architect

SC JOHNSON IS A FIFTH-GENERATION FAMILY COMPANY BUILT ON THE SPIRIT OF OUR PEOPLE. We have been leading with purpose for over 130 years, building iconic brands that win the hearts and minds of consumers – such as Raid®, Glade®, Ziploc® and more, in virtually every country around the world. Together, we are creating a better future – for the planet, for future generations and for every SCJ team member. Join our winning team of Wave Makers and Go Getters and help us write the next chapter in the SCJ story.

As the Manager Information Security Architect, you will be responsible for designing, implementing, and managing the organization's information security architecture for one or more IT domains. You will show strong leadership skills, have information security and technology expertise and a strong ability to assimilate new information quickly, and highly effective communications skills driving to win-win outcomes with our partners. You will present a proven track of successful achievements applying security principles in multiple domains like network segmentation, cloud infrastructure, identity and access management, endpoint protection, application development and operating technology.

This is an onsite role in Racine, WI

KEY RESPONSIBILITIES

• As member of Cyber Security Architecture team with dotted line to the Lead Architect to develop and implement security standards, policies, patterns and procedures for designated IT domains (e.g. cloud, network).

• Design secure and resilient system and network architectures that meet the organization's cybersecurity requirements and goals.

• Ensure the advancement and refinement of security control capabilities focusing on detect, protect and recover controls in primary domains as well as provide shadowing capabilities to emerging technologies.

• Conducting risk assessments and vulnerability assessments to identify potential security risks and threats to IT systems and infrastructure.

• Leading the integration and implementation of security solutions within the organization's IT infrastructure.

• Jointly with Security Engineering and Operation develop and implement incident response plans and procedures.

• Aid in developing security awareness programs and training materials to educate employees and stakeholders about cybersecurity best practices, policies, and procedures.

• Document formal project artifacts – business requirements, high-level architecture/design documentation, low-level architecture/design documentation.

• Provide general security support and consulting to the broader organization.

• Focus on end user productivity, automation opportunities and quality of supporting documentation.

REQUIRED EXPERIENCE YOU'LL BRING

• Bachelor's Degree and 7+ years of experience in security architecture with domain expertise in network security or cloud security and one or more other IT domains (IT/OT, IAM, Network, DevSec Ops, Application Security etc.)

• 3+ years of experience developing information security standards/policies and patterns.

• 3+ years of experience in security risk assessments and risk-based decision making.

• Security certifications – CISSP (or one to be gained within 1 year of employment)  

PREFERRED EXPERIENCES AND SKILLS

• Demonstrated ability to present in threat briefings, security demos, and security brownbag sessions on different security topics.

• Excellent communication skills to articulate complex security concepts to technical and non-technical stakeholders.

• Well versed in industry standard frameworks such as NIST, CIS, CSA CCM, Mitre ATT&CK, ISO 27001, OWASP, and other.

• Cloud, Network focused professional certifications or experience.

• Experience with DevSecOps practices, integrating security into the infrastructure as code (IaC) CI/CD pipeline.

• Earlier IT or IT engineering or support role

JOB REQUIREMENTS

• Full time

• Remote work is available once a week for eligible employees

• This role is eligible for domestic relocation

BENEFITS AND PERKS

SC Johnson’s total compensation packages are at or above industry levels. In addition to salary, total packages may include bonuses, long-term incentives, matching 401(k) contributions and profit sharing based on company profitability, job level and years of service. As a family company, we’re committed to providing benefits such as subsidized health care plans, maternity/p