Manager, Information Security Vulernability Management

General Overview

Functional Area: Information Technology (ITM)
Career Stream: IT Risk & Compliance (RAC)
Role: Advisor (ADV)
Job Title: Architect, Information Security
Job Code: ARC-ITM-SECR
Job Level: Level 10
Direct/Indirect Indicator: Indirect

Summary

The Architect, Information Security applies the understanding of a broad range of technologies and solutions to support strategic business needs and engages with customers at all levels of the organization to successfully realize the vision. They will help in identifying and leading IT Security initiatives and projects. 

Detailed Description

Performs tasks such as, but not limited to, the following:

• Performs strategic assessment and understanding of current capabilities and future security needs of the enterprise, recognize and understand business security risks and define the appropriate risk mitigating controls/technologies
• Able to identify new and alternative approaches to implementing and managing security activities. Provide security consultation and implementation of appropriate controls to minimize the risk of potential loss of revenue, business opportunity or competitive advantage due to malicious attacks, accidental corruption of information, or unauthorized access to sensitive Company or Customer information assets.
• Able to use the business requirements and develop a well-formulated model for security controls, practices, or technologies needed to facilitate
• Maintain relationships with and consult with industry leading Information Security Associations, Companies, and Forums to ensure currency of latest technology and process advances through the above and appropriate education. Manage security trends and how they affect CLS architecture and security protection landscape.
• Liaise with the enterprise architecture, IT Infrastructure and Site IT team to ensure alignment between the security initiatives and projects.

Knowledge/Skills/Competencies

• Strong understanding of system architecture and system design        
• Ability to perform software evaluation and selection    
• Detailed knowledge of IT Infrastructure Operations         
• Comprehensive knowledge of systems integration         
• Familiarity with Enterprise Architecture         
• Knowledge of customer Account Management Strategies and methodologies         
• Ability to prepare budgets and ROI         
• Understanding of business blueprinting capabilities        
• Understanding of infrastructure architecture and application architecture standards at the business level        
• Skills and Experience in Producing Systems Designs            
• Experience in risk and compliance management and process development in the areas of information technology and security
• Advanced knowledge of risk mitigation and business controls        
• Advanced knowledge of data management and analytics         
• Proficient in architecture and solution integration          
• Advanced knowledge in business partnering 
• Excellent communication and business writing skills as well as the ability to develop executive-level presentations/strategies that include process diagrams and designs
• Excellent problem resolution and creative problem solving skills         
• Strong project management skills and strong knowledge of change management processes    
• Strong customer management skills; ability to clearly articulate the role that IT can play in enhancing customer’s activities         
• Knowledge of Celestica’s technology, business and IT strategies    

Physical Demands

Duties of this position are performed in a normal office environment.
Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.
 

Typical Experience

5 to 10 years.

Typical Education

Bachelors Degree.  Specialized Knowledge / Skills.  Security Certifications (CISSP, CISA, CRISC, etc...)    

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.