Cloud Security Architect

At Kia, we’re creating award-winning products and redefining what value means in the automotive industry. It takes a special group of individuals to do what we do, and we do it together. Our culture is fast-paced, collaborative, and innovative. Our people thrive on thinking differently and challenging the status quo. We are creating something special here, a culture of learning and opportunity, where you can help Kia achieve big things and most importantly, feel passionate and connected to your work every day.

Kia provides team members with competitive benefits including premium paid medical, dental and vision coverage for you and your dependents, 401(k) plan matching of 100% up to 6% of the salary deferral, and paid time off. Kia also offers company lease and purchase programs, company-wide holiday shutdown, paid volunteer hours, and premium lifestyle amenities at our corporate campus in Irvine, California.

Status

Exempt

Summary

The Cloud Security Architect is responsible for ensuring Kia America (KUS) cloud-based information systems and data are protected from growing cybersecurity threats. This individual serves as the subject matter expert for cloud-based data protection strategies and works closely with related teams and affiliated IT companies. The Cloud Security Architect is engaged from the beginning of project planning through the full life cycle of a cloud solution including its eventual retirement.  This architect also works to align KUS’s cloud strategy with the global strategy created by Kia HQ’s security team.

Major Responsibilities

1st Priority - 20%

Provides leadership to Kia America and affiliated IT companies on the design and implementation of cloud business solutions that protect sensitive company data when deployed into cloud environments (e.g., AWS, Azure, etc.).

2nd Priority - 20%

Conducts regular security assessments and audits on KUS cloud environments to identify security vulnerabilities and make recommendations to mitigate them.

3rd Priority - 20%

Ensures cloud security controls and compliance measures are implemented in accordance with local and global Kia guidelines, industry best practices and regulatory requirements (e.g., CPRA, HIPAA, ISO 27001:2022, etc.)

4th Priority - 20%

Conducts investigations and create detailed reports on security threats and incidents involving the cloud environment. Recommends solutions to executive leadership as required and leads related team members and partners to a resolution, helping them understand why measures need to be put in place. 

5th Priority - 10%

Stays up-to-date with the latest trends and advancements in cloud security technology, regulations, and industry best practices. Continually updates  cloud security plans, architecture, threats, vulnerabilities, and mitigation plans to ensure Kia’s policies and technology are keeping pace with developing technology and threats. 

6th Priority - 10%

Consults with key stakeholders across all business departments and partners on information security matters.

Education/Certification

• Bachelor's degree in Computer Science, Information Technology, or a related field required.
• Relevant Certification(s) such as AWS Certified Security Specialty and Certified Cloud Security Professional (CCSP) preferred.
   

Overall Experience

• 7+ years of experience in IT security, with at least 3 years focused on cloud security required.

Directly Related Experience

• Expert level experience with cloud security frameworks (e.g., AWS, Azure, Google Cloud) is required.
• Experience implementing security standards (e.g., NIST, ISO 27001, CIS Top 18) is highly desirable.
• Expert level hands-on proficiency with cloud security tools and technologies including network security, encryption, and identity management.
• Experience working in a large, preferably multi-national corporations highly desirable.

Other Requirements:

• Must be proactive, self-motivated, and lead team to multiple concurrent solutions.
• Occasional travel may be required domestically and/or internationally 
• Perform other duties as assigned
   

Skills

Ability to analyze technical architectures and identify security vulnerabilities then remediation efforts.Ability to demonstrate evidence recovery techniques, log data analytics, incident categories, IR event handling methodologies, intrusion detection systems, network protocol and packet analysisAbility to manage external vendors in the development and delivery of related products, programs, and services.Demonstrated leadership skills over technical and non-technical teams.E