INFORMATION SECURITY ARCHITECT - SECRETS MANAGEMENT (REMOTE)

BioSpace, Inc.; San Francisco (CA); Remote; USD 130,000 - 180,000; Full time

Job summary

A leading company in the healthcare sector seeks an Information Security Architect specializing in Secrets Management. This role involves shaping security strategies and collaborating with leadership to protect sensitive information. Ideal candidates will have extensive experience in cloud computing, identity security, and secrets management tools like HashiCorp Vault. This position offers a competitive salary and the opportunity to influence security practices across the organization.

Qualifications

• 8 years of experience with a Bachelor's, 7 years with a Master's, or 3 years with a PhD in application development.
• Experience in systems development lifecycle and secrets management in a corporate environment.

Responsibilities

• Shape and implement security strategy and architecture around secrets management.
• Collaborate with senior leaders as a trusted advisor for information security.
• Manage multiple projects within secrets management.

Skills

Cloud Computing

Secrets Management

Identity Security

Project Management

Creative Problem Solving

Education

Bachelor's Degree

Master's Degree

PhD

Tools

HashiCorp Vault

CyberArk

Job description

AbbVie's mission is to discover and deliver innovative medicines and solutions that solve serious health issues today and address the medical challenges of tomorrow. We strive to have a remarkable impact on people's lives across several key therapeutic areas: immunology, oncology, neuroscience, and eye care, as well as products and services in our Allergan Aesthetics portfolio. For more information about AbbVie, please visit us at www.abbvie.com. Follow @abbvie on Twitter, Facebook, Instagram, YouTube, and LinkedIn.

Job Description: As a key member of the Information Security Risk Management Architecture team, the Information Security Architect - Secrets Management, is responsible for shaping and implementing the organization's security strategy, architecture, and practices around secrets management. This role is crucial in assessing how secrets are utilized across the enterprise and developing strategies to detect, manage, and protect them using best practices, advanced technologies, and specialized services.

The Information Security Architect will collaborate with senior leaders across the organization, acting as a trusted advisor to ensure the security of AbbVie's information assets. This position requires a deep understanding of secrets management and the ability to influence and guide the organization towards robust security practices.

This position can be virtually anywhere in the U.S.

Responsibilities

1. Cloud Computing & Security: Deep understanding of cloud computing principles, including virtualization, containerization, microservices, and serverless computing; risk management, container security, Kubernetes security, IAM security, network security, auditing, encryption, secrets management, data protection, and securing CI/CD.
2. Identity Security & Principles: Advanced knowledge of Identity Security concepts, least privilege, separation of duties, and Zero Trust design principles.
3. Federation & Encryption Technologies: Understanding of federation technologies (WS-Fed, OAuth, OpenID Connect, SAML) and encryption technologies (types, protocols, standards).
4. Secrets Management Architecture: Build the foundational aspects of an enterprise-grade offering for secrets management.
5. Innovation & Architecture Evolution: Drive innovation and evolve the architecture of widely adopted product offerings.
6. Enterprise Solutions Deployment: Experience deploying and managing enterprise-level secrets management solutions, such as HashiCorp Vault, CyberArk, or similar technologies.
7. Subject Matter Expertise: Function as a subject matter expert in secrets management within a large enterprise, developing proposals and implementing strategies.
8. Technology & Threat Response: Anticipate and evaluate technological advances or threats and respond with appropriate strategies.
9. Creative Problem Solving: Demonstrate creative thinking to solve challenges and champion new technologies.
10. Project Management: Manage multiple projects within secrets management, demonstrating mastery across data and software applications.
11. Relationship Building: Develop relationships with affiliates, vendors, and industry peers, aligning with AbbVie's values.
12. Leadership & Mentoring: Mentor or supervise a team, guiding performance and accountability.
13. Compliance & Standards: Adhere to corporate standards, policies, and compliance requirements related to security and data management.

Qualifications

• Bachelor's Degree with 8 years of experience, or Master's Degree with 7 years, or PhD with 3 years in application development.
• Experience in systems development lifecycle and related functions.
• Experience with secrets management in a corporate environment, with familiarity in tools like HashiCorp Vault, CyberArk.

Additional Information: Details regarding compensation, benefits, and legal disclosures are included, emphasizing the company's commitment to equal opportunity and compliance with applicable laws.