Typical Day in Role:
• Represent security in design and architecture discussions and provide security controls
• Work with PCI-DSS team to understand the requirements and map it against GCE and GCVE security controls. Where needed, architect and solution new security controls.
• Create design & architecture materials and present those to architecture review board
• Continuously evolve GCP security controls based on industry best practices and emerging security threats
• Will work closely with multiple cross enterprise teams to gather requirements and the adoption of new security products.
• Co-ordinate efforts from business and technology teams.
• Communicate regularly with various business channels on the progress made for various projects
• Maintain configuration and support documentation
• Manage assigned projects and program components to deliver services in accordance with established objectives
• Solutioning and designing; and work with PCI-DSS – 2 main accountabilities
Candidate Requirements/Must Have Skills:
1. 2+ years’ experience with PCI-DSS, controls design and implementation
2. 4+ years’ GCP security controls experience (services and products) – with demonstrated experience in GCE; OR 2+ years’ experience WITH GCP certification
3. 10+ years’ experience in IT Security
4. 4+ years’ experience in security controls architecting and solutioning
5. 4+ years’ experience with documenting design architecture and security requirements
Security certifications – one of these required: CISSP (1st preference), Google Professional Cloud Security Engineer (2nd preference), CCSP, CCSK
Nice-To-Have Skills:
1. Experience with deployment and managing IaaS, PaaS & SaaS solutions
2. GCVE experience
3. 4+ years’ experience in the financial industry
4. Knowledge of /exposure to infrastructure as code (IaC)
Soft Skills Required:
• Communication: excellent written and verbal communication and interpersonal skills
• Fast learner with strong analytical skills and improvement mindset
• Must be able to operate independently within tight time frames
• High energy, demonstrated ability to work under pressure, deals well with ambiguities and uncertainties, and drives results.
Education: Post Secondary Experience
Security certifications- one of these required: CISSP (1st preference), Google Professional Cloud Security Engineer (2nd preference), CCSP, CCSK
TOGAF or SABSA certification an asset