Director, Security Architect

6 days ago

Singapur, Singapore Marriott International, Inc. Full time
Job Number
Job Category Information Technology
Location Singapore Regional Office, 2 Harbourfront Place , Singapore, Singapore, Singapore VIEW ON MAP
Schedule Full-Time
Located Remotely? N
Relocation? N
Position Type Management
JOB SUMMARY
Lead and manage security architecture and engineeringin APEC. Performs security accreditation and evaluates the implementation of those controls in order to grant Approval to Operate for a release of new infrastructure, services, applications and processes into Marriott's Production Environments in regional level.
Leverages existing Security Engagement processes and documentation, in conjunction with security compliance tools, to determine control implementation status.Will routinely process ITSM Release and Security Engagement Tasks to document justification for all approvals.Will routinely collaborate with multiple teams, including, but not limited to, Business Release Sponsors, Project Managers, Security Architects, Security Architecture Analysts, and Change Management teams to ensure the Security Processes are followed and completed in order to accredit the engagement or release.
Will routinely manage and communicate the status of the tasks assigned in ITSM to thoroughly document the accreditation resulting in granting of Approval to Operate.Understand, communicate, interpret and enforce MI Policies and Security Standards throughout the Certification and Accreditation process. Understand and communicate control objectives in terms of both MI Policy and Standards and Security Best Practice Frameworks, including, but not limited to, NIST RMF, NIST CSF, PCI DSS, GDPR, MPLS, EU Privacy, ISO, as referenced in Marriott's Common Controls Framework. Will periodically provide status and metrics for the assigned C&A Engagements in order to provide visibility and transparency to GIS Senior Leadership
CANDIDATE PROFILE
Education and Experience
Required:
  • Bachelor's degree in Information Systems, Computer Science or related field or equivalent experience/certification
  • 8+ years' experience in Information Security with:
    • 3+ years in process-oriented Security Audit/Assurance/Technical Assessment role
    • 2+ years' team management experience with security technical team members
    • 1-2 years' experience/exposure to Common Controls Framework
    • Exposure/functional understanding of NIST RMF
  • Current and relevant information security certifications such as: CISSP (Certified Information Systems Security Professional), (ISC)2 CGRC certification, ISACA, PCI QSA/ISA, ITIL, IS Certification & Accreditation Professional - ISCAP, GIAC Information Security Professional (GISP),
Preferred Skills & Attributes
  • Strong oral and written communication skills and comfortable with speaking in large groups virtually and in person.
  • Ability to conduct independent security research.
  • Strong understanding of common OWASP flagship projects, Top 10, Cheat Sheets etc.
  • Strong understanding of cryptography concepts: hashing, signing, encryption, decryption, tokenization
  • Strong understanding of SDLC and security integration points
  • Functional understanding of microservice application architecture
  • Functional understanding of common application security controls such as WAF, RASP, Intercepting Proxies
  • Comfortable with the following tools and technologies: GitHub Advanced Security, Postman, Fortify SCA, Jenkins, Artifactory, SonarQube, Docker, JIRA, Confluence, Aqua CSP, Nessus Pro or Tenable.io
  • Comfortable with technical report writing and crafting security requirements.
  • Basic understanding of network security concepts: DOS, DNS Spoofing, ARP Poisoning, Firewalls, Intrusion Detection, Segmentation
  • Basic understanding of Vulnerability and Patch Management practices
  • Basic understanding of endpoint security controls: EDR, Vulnerability Scanning Agents, HIDS, FIM
  • Basic understanding of Agile Software Development Practices & DevOps
  • Master's degree in Computer Science or Software Engineering
  • Mid-level cloud computing certification, AWS Solutions Architect Associate, Azure Administrator Associate, Google Associate Cloud Engineer
  • Functional knowledge software engineering concepts: GOF software design patterns, SOLID design principles (SRP, OSP, LSP, ISP, and DIP) and design methods (Scrum, XP, Lean, Waterfall)
  • Functional understanding of common cryptographic algorithms and libraries
  • Functional foundational understanding of Cloud Computing
CORE WORK ACTIVITIES
Security Accreditation
  • Works with development teams to review application source code for security and operational risks.
  • Perform manual code reviews of applications that are not compatible with automated SAST tools.
  • Provide detailed security documentation to developers, software engineers and technical personnel when necessary.
  • Provide guidance and recommendation to software architects and engineers on how to correct code related security flaws.
Managing Work, Projects, and Policies
  • Manage security architecture and engineering team in Great China.
  • Participate in peer reviews of security assessments created by other team members.
  • Manage tickets and SLAs associated with security testing efforts.
  • Maintain and contribute to the enterprise SSDLC standard.
  • Coordinates and implements work and projects as assigned.
  • Generates and provides accurate and timely results in the form of reports, presentations, etc.
  • Analyzes information and evaluates results to choose the best solution and solve problems.
  • Develops specific goals and plans to prioritize, organize, and accomplish work.
  • Sets and tracks goal progress for self and others.
  • Monitors the work of others to ensure it is completed on time and meets expectations.
  • Provides direction and assistance to other organizational units' policies and procedures, and efficient control and utilization of resources.
Leading Team
  • Creates a team environment that encourages accountability, high standards, and innovation.
  • Leads specific team while assisting with meeting or exceeding department goals.
  • Makes sure others understand performance expectations.
  • Ensures that goals are being translated to the team as they relate to tracking and productivity.
  • Creates and nurtures an environment that emphasizes motivation, empowerment, teamwork, continuous improvement and a passion for providing service.
  • Understands employee and develops plans to address need areas and expand on the strengths.
  • Provides the team with the capabilities needed to meet or exceed expectations.
  • Leads by example demonstrating self-confidence, energy and enthusiasm.
Conducting Human Resources Activities
  • Acts proactively when dealing with employee concerns.
  • Extends professionalism and courtesy to employees at all times.
  • Communicates/updates all goals and results with employees.
  • Meets semiannually with staff on a one-to-one basis.
  • Establishes and maintains open, collaborative relationships with employees.
  • Solicits employee feedback.
  • Interviews job candidates and assists in making hiring decisions.
  • Receives hiring recommendations from team supervisors.
  • Ensures orientations for new team members are thorough and completed in a timely fashion.
  • Observes behaviors of employees and provides feedback to individuals.
Additional Responsibilities
  • Provides information to supervisors, co-workers, and subordinates by telephone, in written form, e-mail, or in person in a timely manner.
  • Manages group or interpersonal conflict.
  • Informs and/or updates executives, peers, and subordinates on relevant information in a timely manner.
  • Manages time effectively and conducts activities in an organized manner.
  • Presents ideas, expectations and information in a concise, organized manner.
  • Uses problem solving methodology for decision making and follow up.
  • Performs other reasonable duties as assigned by manager.
Marriott International is an equal opportunity employer.We believe in hiring a diverse workforce and sustaining an inclusive, people-first culture.We are committed to non-discrimination onanyprotectedbasis, such as disability and veteran status, or any other basis covered under applicable law.
Marriott International is the world's largest hotel company, with more brands, more hotels and more opportunities for associates to grow and succeed. Be where you can do your best work, begin your purpose,belong to an amazing globalteam, andbecome the best version of you.

  • Cyber Security Architect

    1 month ago

    Singapur, Singapore Marina Bay Sands Full time

    We are looking for a passionate Cyber Security Architect to join our Cyber Security Team. The Architect is required to participate in developing strategy and architecture vision for the company. The Architect integrates cyber architectural design with existing and future infrastructure. The Architect determines the impact of proposed new technologies and...

  • Director, Security Architect

    6 days ago

    Singapur, Singapore Marriott International, Inc. Full time

    Job Number Job Category Information TechnologyLocation Singapore Regional Office, 2 Harbourfront Place , Singapore, Singapore, Singapore VIEW ON MAP Schedule Full-TimeLocated Remotely? NRelocation? NPosition Type Management JOB SUMMARY Lead and manage security architecture and engineeringin APEC. Performs security accreditation and evaluates the...

  • Senior Product Security Architect

    2 weeks ago

    Singapur, Singapore Illumina Full time

    What if the work you did every day could impact the lives of people you know? Or all of humanity?At Illumina, we are expanding access to genomic technology to realize health equity for billions of people around the world. Our efforts enable life-changing discoveries that are transforming human health through the early detection and diagnosis of diseases and...

  • Senior Product Security Architect

    1 month ago

    Singapur, Singapore Illumina Full time

    What if the work you did every day could impact the lives of people you know? Or all of humanity?At Illumina, we are expanding access to genomic technology to realize health equity for billions of people around the world. Our efforts enable life-changing discoveries that are transforming human health through the early detection and diagnosis of diseases and...

  • VP, Security Architect

    4 weeks ago

    Singapur, Singapore United Overseas Bank Full time

    VP, Security Architect Posting Date: 22-May-2023 Location: Alexandra (City Area), Singapore, Singapore, 048624 Company: United Overseas Bank Ltd About UOB United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than 500 branches and offices in 19 countries and territories in Asia Pacific, Europe and...

  • First VP, Security Architect

    1 month ago

    Singapur, Singapore United Overseas Bank Full time

    First VP, Security Architect Posting Date: 22-May-2023 Location: Alexandra (City Area), Singapore, Singapore, 048624 Company: United Overseas Bank Ltd About UOB United Overseas Bank Limited (UOB) is a leading bank in Asia with a global network of more than 500 branches and offices in 19 countries and territories in Asia Pacific, Europe and...

  • Cyber Security Engineer

    1 month ago

    Singapur, Singapore Wizlynx Group Full time

    Key Role As Cyber Security Engineer / Architect, you will serve as a subject matter expert in many areas of security. You will lead and execute a variety of engagements and projects such as the integration of security solutions as well as the security review of our customer’s environments and information systems. This role will be part of a team of IT...

  • Security Solutions Architect

    4 weeks ago

    Singapur, Singapore Singtel Full time

    NCS is the leading information, communications and technology (ICT) service provider in Singapore. We deliver end-to-end ICT solutions to help governments and enterprises realise business value through digital transformation and the innovative use of technology. The Security Solutions Architect (SSA) will act in many ways as the Technology Subject Matter...

  • Associate Director, Security Architecture and Risk Assessment

    3 weeks ago

    Singapur, Singapore Singtel Group Full time

    Select how often (in days) to receive an alert: Associate Director, Security Architecture and Risk Assessment (API/Cloud/AI) At Singtel, our mission is to Empower Every Generation. We are dedicated to fostering an equitable and forward-thinking work environment where our employees experience a strong sense of Belonging, to make meaningful Impact and Grow...

  • Associate Director, Security Architecture and Risk Assessment

    2 weeks ago

    Singapur, Singapore Singtel Group Full time

    Select how often (in days) to receive an alert: Associate Director, Security Architecture and Risk Assessment (API/Cloud/AI) At Singtel, our mission is to Empower Every Generation. We are dedicated to fostering an equitable and forward-thinking work environment where our employees experience a strong sense of Belonging, to make meaningful Impact and Grow...

  • Director, Information Security

    6 days ago

    Singapur, Singapore Ensign InfoSecurity Full time

    Director, Information Security page is loaded Director, Information Security Apply locations Singapore time type Full time posted on Posted 30+ Days Ago job requisition id JOBREQ- Ensign is hiring !As Director, Information Security, you will play a crucial role in implementing Ensign's cybersecurity vision. Reporting to the Information Security Office, you...

  • Director, Information Security

    6 days ago

    Singapur, Singapore Ensign InfoSecurity Full time

    Director, Information Security page is loaded Director, Information Security Apply locations Singapore time type Full time posted on Posted 30+ Days Ago job requisition id JOBREQ- Ensign is hiring ! As Director, Information Security, you will play a crucial role in implementing Ensign's cybersecurity vision. Reporting to the Information Security Office, you...

  • Security Architect

    3 weeks ago

    Singapur, Singapore IBM SINGAPORE PTE LTD Full time

    Design security architecture for different projects, guide teams on cyber security controls to be appliedProvide technical analysis and inputs to the project team to ensure system meets security requirements.Provide subject matter advice to address any issues or contentions that may arise during the project and work with the project team to balance...

  • Associate Director, Security Architecture and Risk Assessment

    2 weeks ago

    Singapur, Singapore Singtel Full time

    At Singtel, our mission is to Empower Every Generation. We are dedicated to fostering an equitable and forward-thinking work environment where our employees experience a strong sense of Belonging, to make meaningful Impact and Grow both personally and professionally. By joining Singtel, you will be part of a caring, inclusive and diverse workforce that...

  • Regional Enterprise Architect

    1 month ago

    Singapur, Singapore Hermès Full time

    As the Regional Enterprise Architect for Hermès South Asia IT team, you'll play a crucial role in aligning local IT initiatives with the broader Group Architecture strategy.  Your responsibilities will include: Integration with Group Enterprise Architecture Team: Collaborating closely with the Group Enterprise Architecture team to ensure alignment with...

  • Cloud Architect

    1 month ago

    Singapur, Singapore Changi Airport Full time

    As a Cloud Architect, you will be responsible for the design, development, and implementation of cloud-based solutions using AWS. You will lead the architectural aspects of building highly scalable, secure, and cost-effective applications and infrastructure. Key Responsibilities: 1. Solution Design • Architect and design AWS cloud solutions for...

  • Cloud Architect

    2 weeks ago

    Singapur, Singapore St Engineering Info-security Pte. Ltd. Full time

    Responsibilities:Identify, design, architect and provide information technical solutions for customers in support of implementation.Work closely with the presales team to provide technical proposals, presentations and solution bill of materials and RFPs for mega tenders.Be the go-to person for customer for their system infrastructure design and...

  • Cloud Application Architect

    3 weeks ago

    Singapur, Singapore IBM SINGAPORE PTE LTD Full time

    We are seeking a highly skilled and experienced Cloud Application Solution Architect to join our innovative team.The ideal candidate will have a strong background in cloud infrastructure, cloud-native applications, and full software development life cycle (SDLC), with a particular focus on public sector projects. This role requires an in-depth understanding...

  • Network Architect

    2 months ago

    Singapur, Singapore ST Engineering Full time

    Title: Network Architect Job ID: Location: ST Engineering Jurong East Bui, SG Description: We are seeking a highly skilled and motivated Network Architect to join our esteemed team. As the Network Architect, you will be responsible for overseeing the design, planning, and successful implementation of critical network infrastructure projects....

  • Solution Architect

    1 month ago

    Singapur, Singapore USER EXPERIENCE RESEARCHERS PTE. LTD. Full time

    Roles & ResponsibilitiesJob Responsibilities: Supervision Platform Division Sitting within Information Technology Department, the Solution Architect is responsible: Analyse and align the functional and non-functional requirements (application security, database design , resiliency, performance , reusability, etc) from both Business and Technology...