DE Jobs

Search from over 2 Million Available Jobs, No Extra Steps, No Extra Forms, Just DirectEmployers

Job Information

Kaiser Permanente Sr Director - Enterprise Cybersecurity Architecture and Cloud Security in Pleasanton, California

Upon start, candidate must reside in CA, CO, CT, GA, HI, IL, MD, OR, VA, WA, or District of Columbia.

Technical Summary:

The Senior Director position is a strategic leadership role responsible for shaping and overseeing KP's enterprise's cybersecurity architecture. This individual plays a critical role in ensuring the security and resilience of KP's digital infrastructure, protecting sensitive data, and safeguarding against cyber threats. The Senior Director will lead a team of cybersecurity architects and engineers, driving the design and implementation of innovative security solutions.

Key responsibilities include developing and maintaining the enterprise-wide cybersecurity architecture and cloud strategies, aligning security initiatives with business objectives, assessing risk, and ensuring compliance with industry standards and regulations. This role involves collaborating with cross-functional teams, including IT, legal, compliance, and business units, to integrate security measures into all aspects of KP's global operations.

The ideal candidate will have a strong background in cybersecurity, architecture design, and risk management. The candidate should possess strong experience in leading large-scale cybersecurity initiatives in complex, global environments. This position requires excellent leadership, communication, and problem-solving skills to effectively manage cybersecurity risks and drive continuous improvement to KP's security posture.

Job Summary:

This senior level managing position oversees the development, implementation and maintenance of assigned ITRM process and/or service portfolio by working collaboratively with leadership to develop the ITRM strategy. This role is responsible for staying current with industry trends, benchmarks, and best practices and providing guidance when difficult decisions need to be made.

Essential Responsibilities:

  • Directs the operations of multiple units and departments by identifying customer and operational needs; analyzing resources, costs, and forecasts and incorporating them into business plans; engaging strategic, cross-functional business units to champion and drive support for business plans and priorities; translating business strategy into actionable business requirements; obtaining and distributing resources; setting standards and measuring progress; anticipating and removing obstacles that impact performance; addressing performance gaps and implementing contingency plans accordingly; ensuring products and/or services meet customer requirements and expectations while aligning with organizational strategies; serving as a subject-matter expert and trusted source to executive leadership; and providing influence and consultation in the development of the larger organizational or business strategy.

  • Models and drives continuous learning and maintains a highly skilled and engaged workforce by aligning cross-functional resource plans with business objectives; overseeing the recruitment, selection, and development of talent; motivating and empowering teams; building organizational capacity and developing high potential employees for growth opportunities and advancement; staying current with industry trends, benchmarks, and best practices; providing guidance and leadership when difficult decisions need to be made; and ensuring performance management guidelines and expectations align with and drive business objectives and results.

  • Effectively communicates technical security findings to non-technical audiences.

  • Leads and assists in the development of project strategies, methodologies, and standard processes for moderately to highly complex IT initiatives across multiple security domains by analyzing business and technology requirements to ensure testability and traceability.

  • Reviews and signs off on project (e.g., testing, requirements documentation, logical models, etc.) scope and approach, and partners with cross-functional IT and business stakeholders to review and approve the overall project approach.

  • Researches and stays abreast of industry trends, emerging threats, best practices, and cutting edge techniques to creatively discover and exploit vulnerabilities, and recommend security solutions for technology systems.

  • Serves as an escalation point on issues, dependencies, and risks related to security testing.

  • Determines if the necessary skills and knowledge required to meet ongoing and changing business demands exists across business or technical domains, and ensures skill and knowledge gaps are closed through talent development and outsourcing as appropriate.

  • Leverages partnerships between security consultants, Program/Project Managers, and other IT planning leaders to drive workforce planning efforts.

  • Approves and directs additional staff augmentation through managed service agreements as needed.

  • Oversees budgets and capital planning across departments and annual business cycle levels as appropriate.

  • Oversees the implementation of and adherence to standardized security tools, templates, and processes to support continuous process improvement across business domains.

  • Recommends and advocates for regional and national process or solution design improvements which align with sustainable best practices, and the strategic and tactical goals of the business.

  • Provides insight and guidance to ensure solutions are aligned with business strategies, operational work flow, established budgets, and vendor service level agreements.

  • Develops trends and high level themes related to lessons learned, and communicates this feedback to stakeholders, leadership, and the larger information security community.

  • Collaborates with cross-functional IT teams to gain buy-in and approval of test plans, and tracks quality metrics across testing phases (e.g., SIT, Performance, UAT, Automation, Production, Validation).

  • Ensures KPIs are defined, up-to-date, and aligned to higher level organizational KPIs.

  • Drives the development of cyber security intellectual capital by leading process or procedure improvements, consulting on brown bag training sessions, and leading the development of new training documents.

  • Directs information sharing and integration procedures across cyber security to ensure the exchange of threat intelligence and cyber security vulnerability assessment data.

  • Provides insight and influence to executive management and business leaders on how to remediate issues identified through security testing processes.

  • Reviews, evaluates, and prioritizes value gaps and opportunities for process enhancements or efficiencies.

  • Establishes a network of partnerships with technology risk teams and business stakeholders to respond to and remediate identified issues, and ensure the best approach for improving security posture.

    Minimum Qualifications:

  • Minimum four (4) years informal leadership experience with or without direct reports.

  • Minimum six (6) years managing operating budgets and/or project financials.

  • Bachelors degree in Business Administration, Computer Science, Social Science, Mathematics, or related field and Minimum twelve (12) years experience in IT or a related field, including Minimum six (6) years in information security. Additional equivalent work experience may be substituted for the degree requirement.

    Additional Requirements:

COMPANY: KAISER

TITLE: Sr Director - Enterprise Cybersecurity Architecture and Cloud Security

LOCATION: Pleasanton, California

REQNUMBER: 1304616

External hires must pass a background check/drug screen. Qualified applicants with arrest and/or conviction records will be considered for employment in a manner consistent with Federal, state and local laws, including but not limited to the San Francisco Fair Chance Ordinance. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran, or disability status.

DirectEmployers