Senior Cloud Security Architect - Vice President

 SMBC Group is a top-tier global financial group. Headquartered in Tokyo and with a 400-year history, SMBC Group offers a diverse range of financial services, including banking, leasing, securities, credit cards, and consumer finance. The Group has more than 130 offices and 80,000 employees worldwide in nearly 40 countries. Sumitomo Mitsui Financial Group, Inc. (SMFG) is the holding company of SMBC Group, which is one of the three largest banking groups in Japan. SMFG’s shares trade on the Tokyo, Nagoya, and New York (NYSE: SMFG) stock exchanges.

In the Americas, SMBC Group has a presence in the US, Canada, Mexico, Brazil, Chile, Colombia, and Peru. Backed by the capital strength of SMBC Group and the value of its relationships in Asia, the Group offers a range of commercial and investment banking services to its corporate, institutional, and municipal clients. It connects a diverse client base to local markets and the organization’s extensive global network. The Group’s operating companies in the Americas include Sumitomo Mitsui Banking Corp. (SMBC), SMBC Nikko Securities America, Inc., SMBC Capital Markets, Inc., SMBC MANUBANK, JRI America, Inc., SMBC Leasing and Finance, Inc., Banco Sumitomo Mitsui Brasileiro S.A., and Sumitomo Mitsui Finance and Leasing Co., Ltd.

The anticipated salary range for this role is between $158,000.00 and $198,000.00. The specific salary offered to an applicant will be based on their individual qualifications, experiences, and an analysis of the current compensation paid in their geography and the market for similar roles at the time of hire. The role may also be eligible for an annual discretionary incentive award. In addition to cash compensation, SMBC offers a competitive portfolio of benefits to its employees.

Role Description

The Vice President, Cloud Security Architecture will be responsible for ensuring that Information Security systems and Cloud infrastructures are configured, deployed, and maintained in accordance with SMBC’s polices and security standards.

This position requires participation in technical research and development to enable continuing innovation for Cyber Security and Information Risk management. This role is part of a team responsible for administering security projects designed to safeguard SMBC’s Cloud infrastructures which is made up of Azure, AWS and GCP. The Vice President of Cloud Security Architecture focuses on implementing and engineering information security solutions using industry’s best practices, defining and documenting projects, creating and executing project plans, engaging in project cost management, resource management and performing periodic reporting. Acts as a subject matter expert who utilizes his/her Cloud Security Engineering expertise to resolve complex problems in consideration of established policies, guidelines, or processes. 

Role Objectives

• Drive the architecture, design, implementation, and define cloud security operational directives on multiple security projects and business applications.
• Participate Business and Information Security projects to recommend security controls and solutions applicable.
• Provide guidance and recommendations for a secure security infrastructure.
• Proactively develop and enforce security plans and standards. 
• Gather and analyze performance and compliance metrics relating to the Bank’s information security and information risk standards.
• Continuously assess emerging security trends in the cloud and create policies using automation scripts and standards for adoption with SMBC Performs as the Subject Matter expert focused on multiple technologies within the Security domains (Security Engineering, IAM, Cloud Security, Data Security, Network Security, Encryption, Privileged Access Management, Federation etc.).
• Partner with relevant internal IT Application, Infrastructure, Network and Support teams to ensure that security controls are implemented at all significant layers, test those controls and perform gap analysis to find areas of improvement.
• Strong understanding and hands on implementation experience with SANS/CIS Top 20, NIST CSF, 800-53, ISO27001 and FFIEC CAT controls.
• Strong Incident Response skillset using NIST, CIS, MITRE ATT&CK and CIS frameworks. Being able to conduct threat modeling to determine major threats facing the firm.
• Participate in the development of the security roadmap and communicate the Technology Security vision to senior management and technical departments.
• Coordinates with project team the implementation, upgrade and maintenance of security solutions. 

Qualifications and Skills

Critical Job Knowledge and Core Competencies/Skills:

• Demonstrates in-depth understanding of AWS cloud infrastructure and security controls. Hands on configuration and trou