Job Description Summary

You are a seasoned Cyber Security professional with a passion for building and managing capabilities to drive innovative solutions. In this role, you will hold responsibility for activation of Attribute base access control and authorization as service vision and strategy. Working with cross functional teams to ensure solutions are meeting security and business objectives and outcomes. A successful cyber security professional in this role will continuously improve and innovate the capabilities to drive value, enhance our employee experience and secure our digital assets.

Job Description

Responsibilities:

• This position is responsible for designing, building and executing technical delivery of the ABAC solution.

• Working with vendors and cross functional teams to drive appropriate change through technical standards.

• Implementing policy decision point and policy enforcement point solutions leveraging ABAC and other models to ensure access to structured/unstructured data is securely managed.

• Engages key business stakeholders and customers as it relates to all supported systems and applications to verify, validate, and audit system access.

• In addition, this person will be responsible for working the strategy into over all Identity, Access Management and Governance processes to drive efficiency and right rigor in the ABAC.

• Leads ABAC, PDP and PEP architecture/designs, plans, controls, processes, standards, and policies and procedures to ensure alignment with standards and overall strategy.

• Drives implementation of Policy Decision Point and Policy Enforcement solutions.

• Advises superiors on user security controls effectiveness and recommends enhancements.

• Allocates appropriate resources to ensure that projects are completed within committed time and budget and are integrated with administrative and support protocols.

• Drives ABAC road maps, priorities, planning, and budgeting.

• Helps develop user security requirements by working and communicating with stakeholders throughout the company to effectively drive application development and meet user needs and strategy requirements.

• Guides and directs the direction of the security provisioning processes and team.

• Manage several projects simultaneously and effectively prioritize work.

Required Job Qualifications

• Successful candidates will be security evangelists who can translate security concepts into language that is meaningful to many audiences, including business and technical leaders and individual contributors.

• Candidates must be able to approach application security from the perspective of risk management and avoid purely academic thinking about software security.

• Demonstrate very strong technical leadership skills including solid communication and analytical skills with thorough understanding of product security, development and successful problem definition, decomposition, estimation and resolution

• Must demonstrate the ability to influence decision-making processes at all levels of a large organization will be critical to success.

• Influence decision making through active partnership with cross-functional teams
  Manage strategic business partnerships and relationships through Technical, Financial, Contractual and Relationship management

• Communicate effectively both within immediate team and GE leadership. Ensure team receives consistent messages and has clear understanding of business direction, strategy and results

• With 10+ years minimum experience in Identity and Access Management

• The role will require the candidate to have a wide range of both technical and management skills.

• Experience with and understanding of Single Sign-on, Identity Management and Network Security tools, Awareness programs, and the Information Security industry

• Solid understanding of application security audit principles and best practices.

• In-depth knowledge of ABAC concept and Policy based access control solutions.

• Extensive knowledge of Identity Management technologies such as SailPoint, Saviynt, Okta, Ping, Oracle, ForgeRock and other IAM products

• Experience with Azure, and Microsoft Active Directory

• Experience with Authorization languages and industry wide security concepts

• Experience with application security, network security and cloud security tools and concepts

• Solid understanding of network and underlying infrastructure security principles

• Strong written and verbal skills coupled with the ability to work with all levels of management