Associate Director Cyber Security Engineering Cloud

**Associate Director Cyber Security Engineering Cloud / Data**

**DE.V1**

**ABOUT THE ENTERPRISE TECHNOLOGY SERVICES TEAM**

The Enterprise Technology Services (ETS) team is accountable for all Infrastructure, Security, IT Operations and all End User Services and technologies. This group will ensure that our IT Services are seamless and secure, and that technology is delivered in an efficient, effective, and agile way, with a strong focus on experience. It’s a dynamic and challenging environment to work in - but that’s why we like it. There are countless opportunities to learn and grow, whether that’s exploring new technologies in hackathons, or transforming the roles and work of colleagues, forever. This is your chance to be part of a team that has the backing to innovate, disrupt an industry and change lives.

**JOB ROLE**

The focus on Digital, AI & ML, Data & Data Science along with joint ventures and collaboration with third parties are creating new opportunities within the Cyber Security team. Cyber Security will need to be the cornerstone of our IT strategy as we move towards our future objectives.

We’re looking for IT security professionals that can help us on the journey through this challenging and ever-changing technology landscape. Individuals who:

- Understand that security is a journey and not a destination. Cyber Security is not something that can be “fixed”, and we instead need to focus on innovation to maintain sustainable risk position against the evolving threat landscape.
- Understand that we can’t just buy our way out of a Cyber Security problem. Technology may win the battle, but it won’t win the war.
- Understand that Cyber Security is not just dealing with over-enthusiastic teenagers. We are potentially working against state-sponsored attacks and multi-billion dollar organized crime syndicates.
- Understand attackers, their motivations and their ways of working to be able to get ahead and keep ahead of them.

**KEY RESPONSIBILITIES**

In the role of Associate Director Cyber Security Engineering, you’ll operate within AstraZeneca’s Enterprise Technology Services (ETS) division to deliver quality services and solutions that meet both business and IT needs. You’ll need to collaborate with Business, Solution Delivery, Engineering, and Quality and Compliance functions across a global organisation spanning US, UK, Sweden, China, Japan, Poland, Mexico, India and beyond.

The core accountabilities for the role include:

- Engineer, build, configure, test and implement Cyber Security solutions for the organisation spanning Cloud, on-premise and third-party collaboration environments with the predominant focus on Cloud and DevOps enablement and data security
- Help define the future state of Cyber Security within the organisation specific to Cloud maturity and Data Protection maturity to advance digital trust, conduct review and gap analysis between current state and future state including existing measures and controls, and then work to uplift to align to the future state vision.
- Anticipate threats, identify weaknesses, and respond promptly and effectively to possible breaches or areas of concern with a focus on Cloud and DevOps.
- Continuous testing, continuous validation, continuous monitoring suitable and applicable to more modern and flexible ways of working
- Anticipate the moves, tactics and motivations that hackers will use to try and gain unauthorized access to AstraZeneca’s Cloud and respective data. Keeping on top of latest techniques but also maintaining a view of historical approaches as many of these are cyclical and get reused.

**ESSENTIAL EXPERIENCE**
- Must have large enterprise IT experience, with significant Cloud exposure, ideally experience influencing Cloud Security Posture Management maturity
- Security, compliance and regulatory experience in a public cloud environment
- Able to influence at engineering, architecture, strategic and leadership levels
- Have or are working towards a recognised Cyber Security certification
- Experience and familiarity with a range of automated build and deployment tools
- Experience planning, researching and developing security policies, standards and procedures related to cloud security
- Development and Systems Administration experience - ideally with process automation and/or configuration management
- Good understanding of Agile methodologies
- Excellent written and oral communication skills
- Experience with SIEM, anti-virus software, intrusion detection, firewalls and content filtering
- Security administration and auditing across internal and external network and systems including IDS deployment and monitoring and system vulnerability auditing.
- Familiarity with Security technologies including Intrusion Detection and Prevention, Vulnerability scanning, firewalling/packet inspection, system integrity monitoring, etc
- Familiarity with common attack techniques and their remediation/defence including DoS,