IS Enterprise Security Architect Director

Career Category

Information Systems

Job Description

Enterprise Cloud Security Architect IS Director

What you will do

Let’s do this. Let’s change the world. In this vital role you will be responsible for designing, implementing, and maintaining Cybersecurity and Digital Trust’s (CDT) Security Architecture Framework and accountable to the Chief Information Security Officer. This position ensures that security measures align with the organization's business objectives, regulatory requirements, and technology strategy. The Enterprise Architect is responsible for delivering secure design security control objectives as defined by the organization’s adopted security control framework. The role enables the business to securely achieve its goals by effectively managing risk and ensuring service accountability across all phases and architectural layers of our systems lifecycle process.

The Enterprise Security Architect is CDT’s functional leader in the Enterprise Architectural Review process responsible for developing and approving security design patterns for business solutions reviewed and adopted within our Solution Development Lifecycle (SDLC) process. The role closely collaborates with cross functional Enterprise Architects, Security Domain Architects, Service Leads, key collaborators and business partners to assesses the business’ strategic direction and establish security objectives that produce organizational best practices, approved architectural patterns and reusable elements.

The Enterprise Security Architect Director is part of Amgen’s CDT team and will be expected to contribute and help deliver services and projects in other areas of information security.

This role is based at Amgen's Capability Center in Tampa, Florida.

Job Responsibilities:

The role will be part of the Security Architecture and Engineering (SAE) Team responsible for delivering security services across Amgen globally. Areas of responsibility include:

• Develops strategy, direction and guidance for CDT’s Security Architecture Program, Security Reference Architecture and Neighborhood Plan in alignment with Enterprise City Planning strategy
• Steward of the Enterprise Architecture standards and practices across the CDT organization
• Manages CDT’s Secure Configuration Baseline program; responsible for establishing security standards for Amgen’s technology resources
• Maintain Security Architecture Program alignment with CDT’s adopted security control framework
• Ensure defensible security control validation process is intrinsically integrated into CDT Security Risk Assessments
• Establish and maintain approved security patterns, methods and reusable elements to accelerate solutions delivery through SDLC
• Work with CDT Domain Architects and Service Leads to ensure robust, well designed systems which are consistent with the Enterprise City Planning strategy
• Work with Security Domain Architects to develop proposals for review by the Enterprise Architecture Review Board
• Active, voting member of the Amgen’s Architecture Review Board, representing CDT and its business partners
• Partner with the Enterprise Architecture team to refine and develop the Amgen IS City Plan, ensuring security requirements, priorities and business needs are considered
• Provide vision, architectural insight, testing and guidance for introducing new technology into CDT
• Develop a deep understanding of CDT’s business needs, processes, and environment
• Develop a deep understanding of CDT deployed system landscape
• An understanding of how to work with, and empower technical and non-technical teams to achieve CDT and operations objectives in a technically sound manner
• Travel: Domestic and International travel up to 25% may be required
• Monitor and manage IS control exceptions that require architectural redesign of underlying architectural layers
• Maintain collaborative partnership with Governance, Risk and Compliance (GRC) Team to establish a service risk posture qualitative/quantitative reporting for CDT services
• Manage and mature Domain Reference Architectural characterization
• Provide security control posture reports to help derive strategic decisions and financial investments that trace directly mitigate control gaps
• Work closely with respective security service leads to develop, maintain and publish technical development plan for each CDT Service domains
• Develop and maintain secure configuration specifications for Amgen infrastructure (IoT, mobile, cloud…) on premise and in the cloud
• Define, develop, and maintain the enterprise security architecture vision and strategy.
• Ensure the integration of security controls and measures into IT and business processes.
• Stay ahead of on emerging security t