Description

Key Responsibilities
1. Security Engineering & Architecture
Own the design, implementation, and continuous improvement of security controls across infrastructure, cloud, applications, data platforms, and AI solutions.
Responsibilities include:

• Design and implement practical security architectures for on-premises systems, AWS, Snowflake, and internally developed AI applications.
• Translate cybersecurity standards and risk requirements into deployable technical controls.
• Build secure-by-design patterns for identity, network segmentation, encryption, logging, monitoring, endpoint protection, vulnerability management, and access governance.
• Serve as a senior technical security advisor to infrastructure, engineering, data, AI, and vendor teams.
• Evaluate new technologies and ensure security requirements are embedded early in design and delivery.
• AWS security is a critical part of this role. AWS defines cloud security as a shared responsibility model, where AWS is responsible for security “of” the cloud and customers are responsible for security “in” the cloud. This role will own the Bank’s side of that responsibility across identity, networking, data protection, monitoring, governance, and workload security.

2. AWS Cloud Security
Lead the security design and implementation for the Bank’s new AWS environment.
Responsibilities include:

• Secure a new AWS environment from initial design through operationalization.
• Implement multi-account security patterns, IAM controls, least privilege access, SCPs, logging, monitoring, encryption, secrets management, vulnerability scanning, and network segmentation.
• Design secure VPC, subnet, routing, security group, and NACL patterns.
• Implement controls across services such as IAM, Organizations, CloudTrail, CloudWatch, GuardDuty, Security Hub, Config, KMS, Secrets Manager, Macie, Inspector, S3, Lambda, RDS, EC2, ECS/EKS as applicable.
• Partner with infrastructure and engineering teams to embed security into CI/CD, IaC, cloud provisioning, and operational support.
• Establish AWS security baselines and exception management processes.
• AWS specifically highlights data protection, encryption in transit, IAM, infrastructure security, security groups, subnet controls, resilience, and compliance validation as part of managing security responsibilities for Amazon VPC.

3. On-Premises Infrastructure & Data Center Security
Own security engineering for the Bank’s existing data center and infrastructure environment.
Responsibilities include:

• Maintain and improve controls across servers, endpoints, firewalls, networks, Active Directory, privileged access, remote access, vulnerability management, patching, EDR, SIEM/logging, backup security, and segmentation.
• Strengthen identity and access controls across Microsoft/Windows environments.
• Support remediation of audit findings and security gaps across existing infrastructure.
• Partner with IT operations to ensure cybersecurity controls are practical, sustainable, and operationally reliable.
• Help modernize legacy security patterns while reducing operational risk.

4. Snowflake & Data Platform Security
Support the secure implementation and operation of Snowflake and the Bank’s broader data platform.
Responsibilities include:

• Design and review Snowflake access controls, role hierarchy, authentication, MFA/SSO integration, network policies, data classification, masking, row-level access, and audit logging.
• Partner with data engineering and analytics teams to ensure sensitive banking data is protected appropriately.
• Support security patterns for data ingestion, transformation, sharing, and reporting

Key Skills

Education

Bachelor's degree