Apply on Employer Site

American Express · 1 day ago

Director Cybersecurity - Cloud Security Strategy & Governance

Phoenix, AZ

Full-time

Hybrid

Senior Level, Lead/Staff

$170K/yr - $255K/yr

8+ years exp

American Express is on an exciting cloud transformation journey, and they are seeking a Director of Cybersecurity to lead Cloud Security Strategy and Governance. This role involves managing technology risk, ensuring compliance, and collaborating with various teams to secure the cloud environment.

Credit CardsFinanceFinancial ServicesPaymentsTravel

Comp. & Benefits

No H1B

Responsibilities

Build and lead Program Management functions to drive delivery of centralized cloud security reporting, governance, and finance functions

Develop, coach and mentor a highly motivated team, while coordinating closely with other Information Security and Engineering leaders and business partners

Partner in external and internal audits, ensuring overall adherence to policies and standards, driving the highest level of compliance through response, remediation and escalation as necessary

Establish and refine cloud security budget and finance forecasting for public cloud consumption of security tools

Assess, measure and report against cloud controls, and drive risk reduction guidance across and in partnership with all TRIS domains

Partner with TRIS, Engineering and business stakeholders to help define and prioritize cloud security initiatives

Provide security expertise to the Cloud Program, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Cloud Application Architecture subprograms

Collaborate with enterprise architects and SMEs to deliver comprehensive security solutions that align to Amex cloud strategy

Capture requirements; build functional specifications, timelines, adoption plans and other artifacts to support security implementation

Partner with Architecture teams to build cloud-optimized security patterns and contribute to Enterprise Architecture governance

Partner with and support the Engineering team to drive and execute results in a timely manner

Qualification

Cloud Security StrategyGovernanceInformation SecurityCloud Control MatrixCIS BenchmarksAgile EnvironmentsCloud FundamentalsRisk ManagementTeam LeadershipCollaborationCommunicationMentoring

Required

8+ years of experience in Information Security Roles

Experience with Cloud Control Matrix and CIS benchmarks for gap assessment

Broad understanding of all IS disciplines including, Governance, Cyber Threat, Identity and Access, Infrastructure, Endpoint, Vulnerability, Data Protection, Operations, Application, Incident Response

Understanding of Information Security technology and platform delivery with experience in planning and execution of security projects

Understanding of Cloud Fundamentals, including containers, software-defined networks, high availability design, multi-cloud, and serverless compute

Demonstrated experience in Agile environments, application design, software development, and testing

Bachelor's Degree in computer science, computer engineering, or related field; or equivalent experience

Information Security Certification strongly desired, CISM or similar