Manager- Senior Information Security Operations

You Lead the Way. Weve Got Your Back.

With the right backing, people and businesses have the power to progress in incredible ways. When you join Team Amex, you become part of a global and diverse community of colleagues with an unwavering commitment to back our customers, communities and each other. Here, youll learn and grow as we help you create a career journey thats unique and meaningful to you with benefits, programs, and flexibility that support you personally and professionally.

At American Express, youll be recognized for your contributions, leadership, and impactevery colleague has the opportunity to share in the companys success. Together, well win as a team, striving to uphold our and powerful backing promise to provide the worlds best customer experience every day. And well do it with the utmost integrity, and in an environment where everyone is seen, heard and feels like they belong.

Join Team Amex and let's lead the way together.

Are you ready to join and help transform a program establishing a best-in-industry operations capability for Information Security at American Express? Were seeking an Information Security Manager of Infrastructure Security Operations to drive our mission-critical infrastructure operations initiatives. This role demands a strategic thinker with a deep passion for fortifying complex infrastructure patterns. You'll help define and deliver the implementation of comprehensive systems, optimize existing products, and collaborate closely with cross-functional teams to deliver innovative solutions. If you thrive on troubleshooting intricate challenges, driving cloud security operations, and pioneering Zero Trust and Zero Touch environments, this is your opportunity to make a profound impact.

To be successful, you will work very closely with other Technology Risk and Information Security functions, as well as Network Security, Cloud Security, and many other Technology and non-Technology teams to identify, solution, and deliver operations across infrastructure security. You will be a part of a new Ops West program which aims expand operations to better follow the sun and establish better capacity to drive strong outcomes. This position demands a well-organized; action-oriented team player with the ability to prioritize daily work; work on multiple initiatives simultaneously; establish and maintain an outward looking view on new and evolving network edge technologies; and an ability to mature and operate business critical, end-to-end processes and solutions while ensuring a great colleague user experience.

Responsibilities Include:

Leadership & Team Management: Lead a team responsible for the security operations across the organization, ensuring that the team meets key performance indicators (KPIs) related to security incident response, operational uptime, and threat mitigation. Drive team development and foster a culture of accountability, collaboration, and continuous improvement.

Strategic Security Oversight: Develop and oversee the implementation of the organizations information security strategy, particularly focusing on securing cloud environments and managing security architecture in complex, highly available networks.

Security Operations: Provide oversight for cloud security processes, ensuring that resources are monitored continuously, risks are identified and mitigated, and security policies are maintained for operational stability and compliance.

· Design and deliver Operational processes which support and maintain cloud security capabilities

· Monitor Cloud security resources, identify impacts, and drive resolution

· Manage Code Review process to ensure prompt review of code push requests

· Monitor Cloud Service Provider updates for consideration of security impacts of updates

· Maintain, manage, and update Security Policy for currency and operational stability

· Remediation of infrastructure and cloud impacts

Cross-functional Collaboration: Work closely with enterprise architects, security SMEs, and cross-functional teams to design, implement, and maintain comprehensive security solutions. Be the key point of contact for security incidents, coordinating responses and driving resolution.

· Collaborate with enterprise architects and SMEs to support and maintain complete security architecture solutions.

Cloud Security Leadership: Manage and monitor security policies in cloud environments, including regular code reviews and ensuring security compliance during infrastructure or service provider updates.

· Identify exciting opportunities for adopting new technologies to solve existing needs and predicting future challenges.

Required Skills/Experience

· Experience (+2 years) knowledge and understanding of LAN and WAN expertise working with Cisco Firewalls, Routers and Switches.

· Experience (+2 years) knowledge and understanding of Palo Alto networks firewalls in an enterprise environment.

· 3+ years of experience in Information Security roles with increase of responsibilities and scope.

· 3 years managing infrastructure

· 2 years experience with Terraform implementing IaC configuration changes

· 2 years experience with Terraform Sentinel implementing Policy as Code changes

· A clear understanding of routing protocol metrics to aid in desired traffic flow.

· Cloud Service Provider Service change analysis

· Hands on management of GitHub

· Working with web proxy (McAfee Web Gateway, etc.)

· General understanding and support of processes around threat protection methodology (IPS/IDS, etc.)

· Knowledge with WAN technologies and protocols, including best practices, designs, and troubleshooting.

· Routing protocol experience (Static, OSPF, EIGRP, BGP), redistribution, and summarization.

· Experience working with highly available and redundant networks.

· Clear understanding of Client / Server applications. - Good knowledge and use of protocol analyzers (sniffers, etc.)

· Demonstrated experience in a manager-level role is preferred.

· Knowledge of network architecture, proxy infrastructure, and programs to support network access and enablement.

· Experience in microservices architecture is required.

· Understanding of classical or cloud-native design patterns is required.

· Experience with Docker, Open Containers Initiative, or similar is required.

· Understading of Cloud Fundamentals, including securing public cloud with data protection controls.

· Demonstrated ability to manage large financial portfolios, specifically managing year-over-year budget for BAU operations, new investments and contract renewals.

· Experience with multiple Information Security domains, such as Infrastructure Vulnerability, Data Loss Prevention, End User Security, Network Security, Internet Security, Identity & Access Management, etc.

Educational Requirement:

· Bachelors Degree in computer science, computer engineering, or related field; or equivalent experience is preferred.

· Palo Alto Certification required. (PCNSE 6 and above).

· Information Security or Cloud Certification preferred - CISSP, CISM, CCSP or similar.

· Cloud Engineering or Security Certification preferred AWS Certified DevOps Engineer, AWS Certified Security, GCP Cloud DevOps Engineer, GCP Cloud Security

Engineer or similar is preferred

We back our colleagues and their loved ones with benefits and programs that support their holistic well-being. That means we prioritize their physical, financial, and mental health through each stage of life. Benefits include:

Competitive base salaries Bonus incentives Support for financial-well-being and retirement Comprehensive medical, dental, vision, life insurance, and disability benefits (depending on location) Flexible working model with hybrid, onsite or virtual arrangements depending on role and business need Generous paid parental leave policies (depending on your location) Free access to global on-site wellness centers staffed with nurses and doctors (depending on location) Free and confidential counseling support through our Healthy Minds program Career development and training opportunities

Offer of employment with American Express is conditioned upon the successful completion of a background verification check, subject to applicable laws and regulations.

---