What You'll Do

You will provide advice and guidance on a wide variety of information security issues, concerns, and problems; and ensure that all development of applications and processes include adequate control measures. You will gain widespread support of and compliance with CPX security requirements.

You will also identify, analyze and report information risks to all required levels of management, ensuring clear communication directed to appropriate audiences so that they fully understand the risks and risk management options that enable risk-aware decisions.

You will be guiding employees at all levels on how to address security risks, offering mitigating strategies as appropriate to the business area and overall risk tolerance levels. You will further ensure that the appropriate parties are engaged to assist in implementing security controls appropriate for mitigating the posed risks.

Key Responsibilities

• Act as the primary security point of contact for projects and initiatives
• Provides authoritative information security risk control consultation
• Regularly collaborates with business leaders and product owners to evaluate security needs and impacts of security decisions on business processes as well as to communicate risks
• As part of project development, business application or process improvement, assists in the development of efficient and practical information security systems, procedures and controls
• Participates as a technical advisor for a variety of ad-hoc security projects
• Designs and implements an integrated risk management approach that applies operating controls to manage information security risks
• Implements information security policies, standards, and other requirements
• Guides staff in their efforts to develop applications maintaining secure coding practices and interpret the output of code analysis tools
• Addresses information security related issues and findings, ensuring that remedial actions as well as long term solutions are implemented to mitigate the underlying risks

Who You'll Work With

You'll be part of an innovative security team working with top-skilled cloud operations, application, and platform engineers within CPXE redefining the way that Cisco protects data stored in the cloud. Our team is passionate about security and applies savvy risk-based thinking to build the best outcomes for our customers.

Who You Are

You possess a Master's degree (BS/BA with additional experience will be considered), and at least 7 years of security experience with a mix of security architecture, engineering, governance and compliance. You have practical expertise of securing APIs, Identity Access Management and Key Management Systems. While you have deep technical expertise, you thrive by applying this expertise to gain support and understanding from developers, product owners, and business leaders. You're comfortable working with people of all backgrounds and helping them be successful while improving security.

You have experience securing Cloud systems, and have a solid grasp of cloud security architectures, technical control mechanisms, authentication and authorization methodologies, DevSecOps, and industry security standards such as NIST, ISO, FedRAMP, and others. You have one or more security certifications, particularly those with a Cloud focus (CISSP, CCSP, AWS Cloud, GCP, etc.).

You Are Highly Capable Of

Effectively communicating complex technical ideas to peers, executives, and customers. You balance advanced technical knowledge and strategic business acuity when engaging with senior-level decision makers to convey business value of security. You're a leader who holds yourself and others accountable to deliver excellent results with little guidance. You view security as a service. You show full commitment to customer satisfaction, out-of-the-box thinking, analytical reasoning, and creative problem solving skills. You have a keen ability to switch from high-level thinking to realistic and pragmatic execution.