Assistant Vice President, Cybersecurity (Security Architecture & Engineering)

Introduction

You'll be working in the Cybersecurity Department within the Technology Strategy unit. This position will play a critical role in designing and implementing a robust cybersecurity defense. You will be responsible for developing comprehensive security strategies, reviewing and enhancing enterprise security architecture, and driving the implementation of security tools and technologies. You will work collaboratively across teams to address complex security challenges, safeguard critical assets, and ensure that the firm's digital transformation is secure and resilient. This is a strategic role that requires a forward-thinking mindset to anticipate and mitigate risks in an ever-evolving cyber threat landscape.

Responsibilities

The role will support the CISO in developing and executing the firm's cybersecurity defense strategy and planning for future cybersecurity needs. Key responsibilities include: 

• Identify and recommend areas of improvement in our enterprise security architecture to address existing and emerging cybersecurity threats

• Evaluate and drive proof-of-value/concept initiatives, design, build and deploy enterprise-grade cybersecurity solutions

• Plan resources, validate, and maintain the effectiveness of security tools and technologies in accordance with the overall cybersecurity strategy and architecture

• Align business requirements and objectives with cybersecurity needs and overall strategy, ensuring they reflect the firm's risk tolerance

• Demonstrate strong judgement by acting as a trusted advisor to internal stakeholders, championing security awareness and best practices in a pragmatic and impactful way

• Collaborate with service providers, business partners, and internal stakeholders to embed security-by-design principles throughout the system development lifecycle and lead the rollout of relevant programs and frameworks to drive this initiative

• Assist in post-implementation and continuous improvement efforts to enhance performance and provide increased functionality

• Ensure conceptual completeness of the technical solution

• Support the refinement and enhancement of cyber/tech policies in alignment with the firm's cybersecurity defense strategy to enable effective oversight of departments’ compliance

• Participate in ecosystem strategy development, environment analysis and opportunity identification

Requirements

• Minimum 8 years of relevant experience in the field of security architecture, engineering/solutioning, operations and/or risk management with at least 3-5 years in vendor/service provider environments, project management/implementation/delivery and/or conducting review of security design/architecture 

• Bachelor’s degree in information technology/security, computer science/engineering or related field

• Professional information security certifications such as CISSP, CISM, CCSP, SABSA an advantage 

• Strong technical background is important, with proven ability in security design/architecture review and implementation

• Possess domain knowledge across areas such as endpoint, network, infrastructure, cloud and application security, DevSecOps, identity & access management, data & information protection, supply chain security, threat intelligence, SOC/SIEM engineering and working with MSSPs

• Good knowledge in industry security practices, frameworks, and standards such as MAS TRM, ISO27001, Cybersecurity Code of Practice, and NIST Cybersecurity Framework  

• Strong communication, interpersonal and leadership skills, with proven ability to manage multiple priorities, drive project teams and collaborate across business units and partners to achieve desired end-goals 

• Prior experience in governance, risks and compliance will be an advantage 

• Prior experience in data governance, analytics and engineering will be an advantage

Soft Skills

• Possess an inquisitive, structured, and logical mind to drive end-to-end strategy development and implementation 
• Strong analytical and problem-solving abilities 
• Ability to lead project teams as well as work independently to organize, manage and complete projects 
• Excellent cross-group and interpersonal skills, with the ability to communicate with technical and non-technical teams 
• Excellent communication, presentation, and advisory skills, capable of engaging senior stakeholders 
• Result-oriented and assertive