Principal Cloud Security Architect

Job Description

DESCRIPTION:

Job Description

ViacomCBS is seeking a Senior Cloud Security Architect to join the Information Security team. The ideal candidate will possess a strong technical information security background, enterprise IT and cloud experience. The role will focus on ensuring cloud architectures are secure end-to-end through the development of a mature cloud security framework, selection of appropriate cloud security controls and close collaboration with cloud engineering and DevOps teams across ViacomCBS. This position will play a key role in ViacomCBS's cloud first strategy, enabling maximum return on cloud investments through agile and mature cloud security practices.

Responsibilities
• Provide cutting edge, creative direction for next generation of company-wide security architecture, addressing technologies and processes associated with cloud, hybrid and traditional IT infrastructure and business information systems
• Develop cloud security architecture strategies, frameworks and reference models
• Lead implementation of large-scale cloud security projects
• Provide security expertise and direction on projects related to cloud security architecture and design, implementation, maintenance, governance, and risk management
• Conduct security validation of cloud templates and/or cloud infrastructure
• QUALIFICATIONS:

Required:
• 8 years of experience with IT security principles, practices, technologies, programs and procedures, with at least 4 years in cloud technologies
• A deep understanding of risk management methodologies and frameworks
• Demonstrated expertise in enterprise cloud security architecture, i.e. securing the three cloud service models: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS)
• Ability to use recognized cloud security standards such as CSA, NIST, ISO and CIS
• Hands-on experience with a diverse range of cloud and on-premise security technologies, including identity and access management (IAM), next-gen network firewalls, web application firewalls, distributed denial of service (DDoS) mitigation, encryption technologies, security information and event management (SIEM), threat and vulnerability management, infrastructure as code (IaC), containerization
• Experience working with one or more of the following cloud service providers: Amazon Web Services (AWS), Google Cloud Platform (GCP) and Microsoft Azure
• Strong analytical skills with the ability to parse requirements and relate them to security controls
• Ability to interact with personnel at all levels and across all business units and organizations, and to comprehend complex business initiatives
• Excellent written and verbal communication skills and able to work with minimal supervision

Educational Requirements
• Undergraduate degree in Computer Science, Engineering or related field.
• CISSP, CCSP, CISM, SANS or related security certifications.

#LI-PS1

Preferred:
• SABSA certification a plus.

FUNCTION: IT/Technology Operations

Jobcode: Reference SBJ-dy745k-3-133-159-224-42 in your application.