Sr. Security Architect, Cloud & Apps Solutions

General Overview

Functional Area: Information Technology (ITM)
Career Stream: IT Risk & Compliance (RAC)
Role: Senior Technical Lead (SRT)
Job Title: Senior Technical Lead, Information Security
Job Code: SRT-ITM-SECR
Job Level: Level 11
Direct/Indirect Indicator: Indirect

Summary

This role is primarily responsible for the architecture, design, and security of cloud environments and SaaS applications for Celestica. This role reports into the Corporate IT Security leadership and will work within the IT function and the business to ensure that we meet and exceed the security requirements from Celestica customers. This role will also have to coordinate with external vendors and internal IT teams to ensure that the cybersecurity requirements are met and exceeded.

Detailed Description

Performs tasks such as, but not limited to, the following:

• Architects, designs, and oversees the security of multi-cloud environments, specifically focusing on Google Cloud Platform (GCP), Microsoft Azure, and Google Workspace.
  Leads the product selection process for new cloud security technologies, conducting Proof of Concepts (POCs) and technical evaluations to ensure alignment with business goals.
  Develops comprehensive technical project plans and manages the execution of complex cloud security projects from initiation to closure.
  Ensures and manages governance and maintenance of the Cloud Security Architecture landscape (applications, systems, etc) and roadmap.

• Establishes and maintains effective relationships with process owners/sites to proactively assess business risks and develop risk mitigation.

• Evaluates general and specific training needs; delivers training to support the control environment and associated control framework.

• Design and implementation of security controls for SaaS solutions to ensure data protection and compliance.

• Builds up the governance process for cloud security policies and rules.

• Communicates governance and compliance objectives, fosters a compliant and risk aware culture

Knowledge/Skills/Competencies

• Must have strong knowledge of Access Management, DLP solution, SIEM technology and Auditing and Log monitoring (tools, processes, techniques).
• Cloud Security Architecture: Deep expertise in architecting solutions with Google Workspace, Azure, and Google Cloud.
• SaaS Security: Strong understanding of securing SaaS solutions and integrating them into the corporate security framework.
• Project Management: A good understanding of project management and developing technical project plans.
• Product Selection: A good understanding of product selection processes and vendor management.
• Knowledge and experience in IT Security Best Practices, IT Governance and Audit Procedures.
• Knowledge of common information security frameworks and IT controls frameworks, such as ISO/IEC 27001, ITIL, COBIT/COSO and ones from NIST.
• Excellent written and verbal communication skills, interpersonal and collaborative skills, and the ability to communicate security and risk-related concepts to technical and nontechnical audiences24.
• Strong presentation skills for communicating architectural designs to executive leadership.
• Leadership skills, ability to motivate people.
• Organized and able to meet deadlines.

Physical Demands

• Duties of this position are performed in a normal office environment.
• Duties may require extended periods of sitting and sustained visual concentration on a computer monitor or on numbers and other detailed data. Repetitive manual movements (e.g., data entry, using a computer mouse, using a calculator, etc.) are frequently required.
• Occasional overnight travel is required.

Typical Experience

• 10+ years previous experience in a similar role/industry.

• Extensive hands-on experience designing and securing Google Cloud, Azure, and Google Workspace environments.

Typical Education

• Bachelors Degree.
• CISSP, CCSP (Certified Cloud Security Professional), or relevant cloud vendor certifications are a plus.

Notes

This job description is not intended to be an exhaustive list of all duties and responsibilities of the position. Employees are held accountable for all duties of the job. Job duties and the % of time identified for any function are subject to change at any time.