Senior Cloud Security Architect - IS-Mod

The role of the Senior Cloud Security Architect demands business intellect, technical acuity, and the ability to think, communicate, and write at various levels of abstraction, business acumen, and technical capacity. The Senior Cloud Security Architect is considered well-versed, a leader, and a mentor; able to identify and resolve technology related information security gaps based on the organization's risk posture with input from peers. This is accomplished by maintaining a focus on cloud security while retaining enterprise security functions. This individual embraces teamwork, collaboration, and consensus driven decision making and has seasoned negotiation and influencing skills.
The Senior Cloud Security Architect will provide oversight and implement, with guidance from Principal Cloud Security Architects, the following key functional areas:
• Serve as an information security liaison to business leaders, executive sponsors, senior service/product owners, and third parties. 
• Lead information security efforts by guiding work throughout projects, initiatives, program increments, workshops, design/solution sessions, and consulting work. 
• Collaborate with senior leaders across engineering, enterprise architecture, OIS, and development practices to solve complex problems and deliver end-to-end solutions. 
• Lead efforts that relate to creating and updating cloud and enterprise information security policies, standards, guidelines, and best practices. 
• Advocate for the use of strong security principles and strategies throughout the organization. 
• Identify, prioritize, and escalate areas of inefficiencies, high risk information security practices, or sub-optimal operational outcomes and consult on strategies to remediate. 
• Help drive consensus on relevant strategies or initiatives with stakeholders, customers, and business leaders to achieve mutually beneficial outcomes. 
• Work with a high level of autonomy while keeping the CISO, security leadership, and OIS informed of risks, new work, roadblocks, and organizational developments. 
• Maintain strong relationships by guiding customers and stakeholders on the applicability of security architecture as it relates to their area of responsibility. 
• Develop and defend security architectures or strategic security direction to executive leaders, customers, stakeholders, and technical implementation teams. 
• Identify, help prioritize, and justify work efforts to IT, solution architects, enterprise architects, engineers, and analysts. 
• Represent management and communicate OIS strategy as the technical lead for projects and cross departmental efforts within research, education, patient care, and with external partners. 
• Contribute, maintain, and implement the training program for new Cloud Security Architects. 
• Maintain a reputation of positive leadership throughout OIS and act as a mentor and trainer to OIS colleagues.

This vacancy is not eligible for sponsorship/ we will not sponsor or transfer visas for this position. Also, Mayo Clinic DOES NOT participate in the F-1 STEM OPT extension program.

An Associate's degree and 12 years of experience related to Information Systems or an accumulated equivalent body of work. Alternatively, a Bachelor's degree and 10 years of similar experience.
• 8 years of experience in a Cybersecurity focused field.
o OR a Cybersecurity relevant Master’s degree and 6 years of experience in a Cybersecurity focused field. 
• 4 years of demonstrated leadership experience.
• 2 years of experience in Cybersecurity Architecture or a role with an equivalent set of competencies and responsibilities.
• 2 years of experience working as a Cybersecurity practitioner with competencies relating to IaaS or PaaS within one of the major public cloud service providers, preferably GCP or Azure.

The Senior Cloud Security Architect is expected to be well-versed in a complementary mixture of the following skills and abilities. 
• Take enterprise and cloud initiatives, extract meaningful business requirements, translate them into information security requirements, and demonstrate completeness by incorporating them into the design to fit the needs of the customer and stakeholders.
• Advise on and develop cybersecurity strategy, within the enterprise and cloud, to align with operational activities, and communicate broadly across OIS.
• Perform threat modeling to provide traceability in enterprise and cloud security designs while incorporating potential business impact.
• Research and evaluate modern technologies to stay current on emerging topics.
• Guide efforts as it relates to enterprise and cloud security risk functions such as ris