Job Description Help for Job Description. Opens a new window.

JOB SUMMARY

We are seeking a talented, passionate Cloud Security Engineering Manager to join our team and help lead efforts to secure the Bank's cloud-based banking and support applications, infrastructure, SaaS platforms, and hybrid environments. As a Cloud Security Engineering Manager, you will be responsible for helping to develop, execute, and continuously improve the Bank's cloud security strategy in collaboration with Enterprise Architecture, Cloud Architecture, IAM, Application Security, Cyber Threat Intelligence, Infrastructure, Technology Risk, Data Platform, and Software Engineering teams. Responsibilities include designing, implementing, and operating modern cloud-first security solutions and best practices across AWS, Azure, GCP, SaaS, and hybrid environments. The role also drives vulnerability remediation, security platform lifecycle ownership, control execution, executive reporting, and audit/regulatory readiness in alignment with the Technology Security operating model. You will manage and mentor security professionals while partnering across IT and Security to reduce enterprise risk, improve remediation accountability, and maintain effective security operations. This role is expected to operate in close alignment with the Director of Technology Security and the broader

CIO / CISO

operating model. This role may require occasional work outside standard business hours to support security incidents, critical remediation activities, audit/regulatory requests, or high-priority technology initiatives.

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Designs, develops, and deploys modular cloud-first security and support systems across cloud, SaaS, and hybrid environments.
• Develops and enforces cloud security policies, standards, and guidelines to ensure compliance with regulatory and industry requirements, including NIST, FFIEC, GLBA, PCI-DSS, and related cybersecurity standards.
• Leads execution of cloud security strategy, standards, and operational controls across AWS, Azure, GCP, SaaS, and hybrid technology environments.
• Identifies opportunities to reduce cloud security risk for the Bank and lead the team in implementation of risk-reducing solutions.
• Accountable for identification, prioritization, tracking, and remediation coordination of cloud-hosted vulnerabilities, misconfigurations, exposed services, and security control gaps.
• Partners with enterprise Vulnerability Management teams develop and implement risk-based remediation strategies across cloud, SaaS, application, and hybrid environments.
• Establishes remediation standards, service level objectives, escalation paths, and reporting metrics for cloud vulnerabilities and security findings.
• Supports enterprise initiatives focused on reducing critical vulnerabilities, improving patch and configuration hygiene, and reducing overall technology risk exposure.
• Participates in security assessments and audits of cloud environments and assists with identification and remediation of potential security gaps and/or vulnerabilities.
• Validates remediation efforts through security assessments, configuration reviews, continuous monitoring, testing, and evidence collection.
• Plans, architects, and implements cloud security tools and technologies, such as firewalls, IDS/IPS, identity and access management, logging and monitoring, CSPM, CNAPP, CASB, and cloud-native security services.
• Owns lifecycle management of cloud security technologies, including evaluation, implementation, operation, optimization, roadmap planning, and retirement.
• Ensures integration between cloud security platforms, identity services, vulnerability management solutions, logging solutions, SIEM/SOAR capabilities, and security monitoring technologies.
• Drives automation initiatives to improve security operations, reporting, remediation workflows, control validation, and operational efficiency.
• Evaluates and develops a framework for SaaS security baselining and standardization, inclusive of IAM, data security, configuration, and access control considerations.
• Assists with security incidents or events in cloud and hybrid environments and collaborate with other teams to resolve issues and mitigate risks.
• Partners with Cyber Threat Intelligence, Security Operations, and Incident Response teams to operationalize threat intelligence and emerging threat information.
• Evaluates threats impacting cloud platforms and coordinate proactive mitigation activities for critical vulnerabilities, zero-day threats, and actively exploited issues.
• Research and stays updated on the latest cloud security trends, threats, attack patterns, and best practices, especially as they relate to Financial Services.
• Educates and trains other staff on cloud security awareness, secure engineering practices, standards, and operational expectations.
• Integrates, as appropriate, AWS and other vendor security services and features to enhance the security posture of cloud environments.
• Apply API security principles and techniques, such as authentication, authorization, encryption, rate limiting, and monitoring, to protect cloud-based APIs from unauthorized access and abuse.
• Uses cloud security posture management and related tools and processes to monitor and remediate misconfigurations and security risks across cloud environments.
• Uses cloud access security broker or other Internet traffic filtering solutions to enforce security policies and controls for cloud-based applications and data.
• Develop and maintain cloud security dashboards, KPIs, KRIs, remediation metrics, and executive reporting packages.
• Prepares and presents cloud security posture updates, remediation progress, risk trends, operational metrics, and recommendations to Technology Security leadership.
• Creates, maintains, and presents documentation as it relates to cloud security operations designs/configurations, processes, standards, risks, and recommendations.
• Supports internal audits, external audits, and regulatory examinations through production of security evidence, documentation, operational metrics, and remediation status reporting.
• Partners with Risk Management, Compliance, Internal Audit, Legal, and CISO-governance functions to address findings and drive corrective actions.
• Oversee the performance and development of a team of cloud engineers and other Cybersecurity professionals while providing feedback, coaching, and mentoring.
• Understands network security policies and introduce and implement security standards and best practices for cloud engineering.
• Manages project budgets and schedules and ensures timely and quality delivery of security solutions.
• Provides support and guidance to team members and resolves any issues or conflicts.
• Collaborates with Network, Enterprise Architecture, Cloud Architecture, Data Platform, IAM, Application Security, Cyber Threat Intelligence, Infrastructure, Technology Risk, and Software Engineering teams to design, implement, and support an enterprise-class cloud security strategy.
• Adheres to and complies with applicable, federal and state laws, regulations and guidance, including those related to anti-money laundering (i.e. Bank Secrecy Act, US PATRIOT Act, etc.).
• Adheres to Bank policies and procedures and completes required training.
• Identifies and reports suspicious activity.

SUPERVISORY RESPONSIBILITIES

• Supervises function, projects or services and/or one or more employees, as applicable.
• Carries out supervisory responsibilities in accordance with the organization's policies and applicable laws.
• Responsibilities include interviewing, hiring, and training employees; planning, assigning, and directing work; appraisi.

.. Visit the Employer site for more details