Information Technology Security Architect PM

Profile

Job Title:
Security Architect-Product Management,
CISSP, CISA, ISSAP, ISSMP
Job Title most commonly recognized in the market place for this position:
Information Technology Security Architect
Job Overview
Propose Security features/capabilities for Hitachi ICT products, Evaluate competitiveness of current Security Offerings (i.e. product / services), assess the security posture of products, guide product-based security certifications, and implement product security strategy elements.
Create and maintain business plans for the life-cycle of the security offerings.
The IT Security Architect provides guidance on the future / current direction for design, implementation and lifecycle of Information Technology Security offerings (Hardware, Software and Services).
Work closely with Hitachi security strategy and planning personnel (e.g., CTO Security & Privacy).
Serves as a security expert for sales teams, customers and professional organizations in various technologies and platforms that effect infrastructure (such as applications, SAP system, virtualization, cloud, storage, networks, data centers, computing devices, messaging, monitoring systems, etc.) as well as specific areas (cyber security and information assurance; data privacy, compliance, and legal; protection of information assets and systems from current and emerging threats).
The IT Security Architect contributes to the development and maintenance of information security strategy and architecture at the corporate level; and may provide support across other product / service offerings, ensuring the implementation and operation of the appropriate security controls across the product/service offerings are commensurate with systems and information risk and are aligned with IT security policies and standards.
Job Functions.
Evaluate the viability of a security offering (i.e. product or services) based upon criteria defined by Security Industry Standards Organizations, USA and EMEA Government Security Organizations, Customer Requirements and Vertical Market Best Practices
10%
Create and maintain business plans. 10%
Manage / Coordinate the full-life cycle of security offerings including but not limited to pricing, marketing, messaging, positioning, packaging, support planning and reporting
40%
Coordinate the launch of new products and product upgrades with all impacted groups within the company 10%
Assist Technical Operations with managing the scheduling / prioritization of hardware products for qualification with strategic partners by minimally attending regular schedule meetings 20%
Assist with maintaining SharePoint Sites 5%
Perform other duties as assigned by Senior Product Management 5%
Interprets information security policies, standards, and other requirements as they relate to product and service offerings and assists or oversees the implementation of information security requirements.
Acts as a liaison for the internal or external parties requesting guidance, information and input on future/current Security offerings
Acts as a technical consultant on information security items for solution development, service delivery and customer sales activity.
Establishes and maintains strong working relationships with groups involved with information security matters such as the Hardware Development, Software Development, Services Development, Legal Department, Internal Audit Department, Physical Security Department, Information Technology Department, Information Security Council, HR and all outsourced IT organizations.
Establish and maintains strong working relationships with groups involved with Sales and
Marketing of Security offerings such as Product Marketing, Geo Sales Management, Account Sales Team and outside Industry Analysts.
Primary Qualifications
Bachelors degree in a technical related field and minimum 8 years of recent relevant experience
A minimum of 5 years of proven broad in-depth technical knowledge of Security concepts, principles and process is required.
A minimum of 5 years of experience in and a strong understanding of infrastructure, application and security appliance functionality using strong security practices
Hold the (ISC)2 CISSP professional certification, or be able achieve this certification within 3 months of employment. In addition, at least one of the following Professional certification(s) required ISACA CISM, ISACA CISA, CCIE, (ISC)2 concentration certification (i.e., ISSAP, ISSMP, or ISSEP), or SNIA SCSE, with a preference for ISACA CISA.
Possess the relationship skills, cultural awareness, and organizational prowess required to work effectively in a large, highly-matrixed organization. Capable of delivering results through a position of influence, not authority.
Adept at communicating complex concepts to diverse audiences with varying skills sets.
Written and oral Communication skills are critical. Must be able to communicate with the technology providers as well as with business leaders. An ability to understand the technical details and communicate the essentials at a high level is essential.
Ensures that IT Security offerings meet the requirements of all USA and International regulatory requirements or contractual requirements;
Preferred Skills / Qualifications:
Experience interaction with geographically disbursed and international resources.
Advanced technical capabilities in a wide array of platforms and systems (e.g., VMware, Windows, Cisco UCS, UNIX, SQL, etc.).
In-depth experience with IT audit/assessment/examination; SAS 70/SSAE practices; ITIL; ISO-standards; NIST, CobiT and Industry standard application development methodologies
Demonstrated experience teaming with business and IT stakeholders teaming on projects to deliver world class results
In-depth internal control knowledge of core IT technologies and processes (e.g., network systems, operating systems databases, change control tools and processes, computer system operations, application and system development, help desk and monitoring, information security, data backup/retention/recovery, IT vendor management, asset management, disaster recovery, etc.)
Knowledge of Information Storage Systems highly desired, but not required.
Other:
Include span of control
(# of direct reports), budget control, scope of influence, impact of errors, physical requirements, travel and any other important factors.
Position is based in United States / Canada.
Prefer California.
No direct Reports or budget responsibility.
Ability to travel approximately 50% in the United States and International.
Errors have a high impact on product margin, sell-ability and supportability.
Hitachi Data Systems

Company info

Sign Up Now - WashingtondcCrossing.com