Cloud Security Architect; Remote

Overview

Cloud Security Architect will serve as a key technical resource in the Global Cyber and Information Security (GCIS) organization. You will be responsible for developing and/or maturing security architecture with a cloud-first mindset, recommended standards, reference architecture designs, and narratives. You will need to stay current on security architecture best practices and provide direction for cloud technical specifications. You will work closely with other Information Security colleagues, IT & Infrastructure, and Business teams globally to provide security architecture guidance and recommendations.

Take a leadership role and influence security architecture by example and clearly articulating objectives.

• Assess, review and design secure cloud solutions working with various business teams and groups.
• Promote cloud security awareness in interactions with other teams.
• Use a data-centric risk-based approach to cloud security and solutions.
• Define and create security architectural standards, artifacts, design patterns, and technical specification documents for the enterprise.
• Assess, monitor and recommend security improvements and best practices to improve security posture, mitigate risks and balance costs.
• Work with direction from the cyber leadership and closely with the enterprise architecture, engineering and operations and security engineering teams to ensure cloud platforms are matured and securely configured.
• Oversee and consult with project teams in business units to ensure adherence to cloud security design patterns and best practices.
• Engage with M&A teams to integrate acquired resources into the Gallagher cloud.
• Design, collaborate and provide cloud options for solutions that balance business requirements with information security requirements.
• Proactively identify technical and architectural risks for current or proposed state, commenting and/or providing cloud alternatives for consideration that will improve capabilities, champion to present for approval and change.
• Participate in security technology evaluations, proof of concept testing and provide in-depth analysis of the proposed solution.
• Collaborate and partner with various key stakeholders across the enterprise to ensure alignment with the overall intended design.
• Partner with architects and engineers within infrastructure, network, application and business teams to ensure that solutions are developed and managed as per GCIS policies and standards.
• Assist with risk mitigation and governance activities aligned with cloud security architecture compliance.
• Enable architectural leadership within engaged and assigned forums and projects, acting as a guide by example for collaboration, thought leadership and expertise in cloud security architecture.

Required:

• Bachelor's degree or equivalent in Computer Science or related field
• Minimum 3+ years working with Microsoft Azure
• Minimum 3+ years of cybersecurity experience
• 2+ years of experience working with other cloud platforms (AWS, GCP, Oracle)
• Minimum 1+ years of experience reviewing detailed solution architectures and providing feedback to the application and infrastructure teams.
• Experience with reviewing and developing cloud solution-enabled models and security monitoring tooling.
• Minimum 1+ years of experience with multi-cloud security and aligning policies across platforms.
• Demonstrated working experience in a regulated and globally distributed environment.
• Knowledge and experience in enterprise architecture frameworks such as TOGAF.
• Knowledge and experience implementing security standards frameworks (NIST - CSF, ISO 27001, CSA CCM, PCI-DSS, GDPR)
• Proven success recommending and implementing cloud security architecture best practices and standards for large projects or programs delivering or migrating to cloud solutions and services.

• At least one certification related to information security such as CISSP, CCSP, CCSK, AWS Solutions Architect, Azure Security.
• Demonstrated knowledge of multi-cloud environment security.
• 2+ years’ experience in a global organization
• Insurance and risk management domain knowledge desirable.
• Architecture tasks associated with…