Unisys Corporation Looking for Security Architecture & Engineering Sr Director at Philadelphia, PA  Full Time

What success looks like in this role:

Job Description Summary

The Security Architecture and Engineering (SAE) is a senior leader that manages the team for managing the Security Architecture and Engineering teams that protect Unisys. This role will oversee the implementation of security mechanisms, processes, and tooling that keep our corporate networks and systems safe, conducting reviews of infrastructure and applications to ensure that our developer and sysadmin teams maintain high standards. The Cyber Security Manager will serve as an SME and escalation point on questions around security architecture design, processes, and incident investigations. Communication and collaboration with other business units is important to drive security standards and ensure seamless execution of evolving policies. Candidates for this role should have a strong background in infrastructure, application security, networking, and have experience directly managing technical resources.

Key Responsibilities

• Is accountable for the performance and results of the Security Architecture and Engineering team. Develops departmental plans, including business, production, operational and/or organizational priorities. Ensure that the teams are meeting specified SLA and KPI targets for request queues, process reviews, and team managed security tooling.
• Identifies, evaluates, tests, and implements appropriate security products, tools, and systems to establish and ensure a secure infrastructure.
• Identify opportunities to leverage Unisys’ capabilities to further support the different Business units and Corporate IT (CIT) groups.
• Work hand in hand with the CTO team to build solutions that meet Unisys and Unisys’s customers security requirement and policies yet keep security seamless and user friendly.
• Engage at all point of BU and CIT projects to ensure Security controls and proper risk management practices are implemented including secure coding, code review, code application scanning as part of the quality process.
• Support’s root cause analysis processes based on information about CIT or engineering groups processes, technology, and maturity.
• Architect and lead the vulnerability management program for the entire enterprise.
• Develop and present on remediation and mitigation plans to address systemic issues and root causes identified during and between projects.
• Drive the Vulnerability remediation throughout the enterprise by driving BISO actions.
• Manage Information security project timelines, budgets and interdependencies related to integration planning, improvement initiatives, system development/launches, operational systems improvements, and other projects as established by corporate operating plan.
• Interfaces integrated entities (M&A) management and business units to understand business issues/needs and ensure that client expectations are in line with delivery plans
• Support projects initiatives (Cerberus) from a technical standpoint.
• Lead the Identity and Access Management team.

• Contribute to the Security organization go forward design and talent selection: Interviewing, hiring; Establishing priorities, goals and objectives for new functions; Defining performance criteria; Allocating workload and setting deadlines.
• Ensures that all architecture designs, plans, and controls meet a high bar by managing the security review and exception process for both on-prem and cloud environments.
• Works with the threat intelligence team to identify security risks and exposures, determine the cause of security violations, and develop procedures to protect against future incidents and improve security posture.
• Develops techniques and procedures for conducting cyber security risk assessments, assist with the evaluation and testing of software for possible impact on system security.
• Work with the incident response team on investigations and resolution of security incidents.

You will be successful in this role if you have:

• Bachelor’s Degree with an Engineering pedigree or equivalent experience
• 15+ years broad and diverse experience across cybersecurity strategy, compliance, operations, security architecture, vulnerability management, and cloud security
• Strong understanding of audit/risk management methodologies and regulatory requirements pertaining to information security, privacy and/or data security
• Experience across multiple industries with expertise handling regulatory issues and risks.
• Ability to plan, execute and deliver high quality Security, Compliance and Risk management projects that solve real business needs.
• ISACA CRISC or CISM, (ISC) CISSP or CISSP-ISSMP certifications are a plus.
• Risk management experience with demonstrated technical proficiency in applying cybersecurity controls.
• Experience managing a global team of architects and engineers and overseeing and executing highly complex, cross-organizational initiatives within a large enterprise.
• Ability to build relationships, influence and drive outcomes across multiple stakeholder groups.
• Experience to successfully distill complex technical information into clear, concise yet comprehensive communication material.
• Experience with understanding the fundamental company security and risk management strategy and be able to apply that as fundamental pillar of the transformation strategy.

• Ability to effectively present complex technical topics to non-technical and technical audiences
• Project management experience and mentoring project personnel when required.
• Ability to manage multiple complex priorities and competing agendas without express authority over delivery teams.
• Ability to interpret and apply policies and regulations across a large, complex business.
• Analytical aptitude with an emphasis on investigative, methodical critical questioning and logical thinking; a data-driven decision maker

This role may require access to export-controlled commodities and technology. Therefore, to conform to U.S. export control regulations, applicant should be eligible for any required authorizations from the U.S. Government.

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers. If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [email protected] or alternatively Toll Free: 888-560-1782 (Prompt 4). US job seekers can find more information about Unisys’ .

Unisys is an Equal Opportunity Employer – Minorities/Females/ Veterans/Individuals with Disabilities/ Sexual Orientation/Gender Identity