Senior Manager, Information Security Architecture – Engineering

Jobtailor; Deutschland; Vor Ort; EUR 120.000 - 150.000; Vollzeit

Zusammenfassung

Jobtailor seeks a Senior Security Architect to define and scale secure architecture across cloud and on‑prem environments, embedding security into development lifecycles. You will partner with engineering and DevOps to integrate security into SDLC, CI/CD, and data pipelines.

You will own vulnerability management, drive security assessments, and lead globally distributed teams, aligning security with regulatory and business goals.

Qualifikationen

• 10+ years of experience in security architecture, application security, infrastructure security, or related domains.
• Strong background in cloud security (AWS, Azure, GCP), DevSecOps, and/or data security.
• Experience leading a globally distributed team across time zones with asynchronous collaboration.
• Experience leading and developing globally distributed security teams with a focus on growth.
• Experience designing security controls for data flows and distributed computing environments.
• Hands-on expertise in secure software development practices, security testing methodologies, and threat modeling.
• Strong cross-functional leadership with ability to communicate security risks to engineering, IT, and business stakeholders.
• Experience with security frameworks and regulations (e.g., NIST CSF, PCI-DSS, GLBA).

Aufgaben

• Define and maintain secure application and infrastructure architecture frameworks, ensuring security is built-in from the outset.
• Partner with engineering, DevOps, and technology teams to integrate security into SDLC, CI/CD, and data pipelines.
• Own and oversee the vulnerability management program, ensuring risk-based remediation across all technology assets.
• Enhance and scale an existing security design review service, providing structured security assessments for new and evolving systems and data.
• Advocate for security as a service, building tools and processes that streamline secure development and system operations.
• Act as a security advisor to engineering and technology operations, ensuring security aligns with business goals.
• Collaborate with the Security Governance, Risk, and Compliance (GRC) team to align technical security requirements with regulatory and commercial requirements.
• Champion a security-first culture, ensuring technical execution teams understand security risks, standards and best practices.

Kenntnisse

cross-functional leadership

communication

asynchronous working

team development

risk management

security culture promotion

Ausbildung

Bachelor's degree in Computer Science, Information Security, or related field

Tools

AWS

Azure

GCP

CI/CD

SDLC

vulnerability management tools

security assessment tools

data pipelines

security governance tools

Jobbeschreibung

Responsibilities

• Define and maintain secure application and infrastructure architecture frameworks, ensuring security is built-in from the outset
• Partner with engineering, DevOps, and technology teams to integrate security into SDLC, CI/CD, and data pipelines
• Own and oversee the vulnerability management program, ensuring risk-based remediation across all technology assets
• Enhance and scale an existing security design review service, providing structured security assessments for new and evolving systems and data
• Advocate for security as a service, building tools and processes that streamline secure development and system operations
• Act as a security advisor to engineering and technology operations, ensuring security aligns with business goals
• Collaborate with the Security Governance, Risk, and Compliance (GRC) team to align technical security requirements with regulatory and commercial requirements
• Champion a security-first culture, ensuring technical execution teams understand security risks, standards and best practices

Requirements

• 10+ years of experience in security architecture, application security, infrastructure security, or related domains
• Strong background in cloud security (AWS, Azure, GCP), DevSecOps, and/or data security
• Experience leading a globally distributed team across time zones which relies heavily on asynchronous working and collaboration methods
• Experience leading and developing globally distributed security teams with a focus on professional growth and collaboration
• Experience designing security controls for data flows and distributed computing environments
• Hands‑on expertise of secure software development practices, security testing methodologies, and threat modeling
• Strong cross‑functional leadership with the ability to communicate security risks effectively to engineering, IT, and business stakeholders
• Experience of security frameworks and regulations (e.g., NIST CSF, PCI‑DSS, GLBA)
• Bachelor's degree in Computer Science, Information Security, or related field

Hard Skills

• security architecture
• application security
• infrastructure security
• cloud security
• DevSecOps
• data security
• secure software development practices
• security testing methodologies
• threat modeling
• security controls design

Soft Skills

• cross‑functional leadership
• communication
• collaboration
• team development
• asynchronous working
• advocacy
• risk management
• security culture promotion
• stakeholder engagement
• structured assessments

Industry Keywords

• NIST CSF
• PCI‑DSS
• GLBA
• security governance
• risk management
• compliance
• security-first culture
• technical security requirements
• regulatory requirements
• security assessments

Tools & Technologies

• AWS
• Azure
• GCP
• CI/CD
• SDLC
• vulnerability management tools
• security assessment tools
• data pipelines
• security frameworks
• security governance tools