Job Description

The Senior Manager of Product & Platform Security is a critical leadership role responsible for driving information security excellence across the WBA enterprise technology ecosystem. This role ensures robust security resilience, effective risk management, and continuous improvements in security practices. The successful candidate will provide strategic thought leadership, technical oversight, and enhance control hygiene while fostering a culture of security awareness, ownership, and accountability.

Key Responsibilities

1. Information Security Thought Leadership and Resilience

• Lead and accelerate Health Check reviews for critical IT Security-owned and managed products and tools.
• Complete comprehensive Health Checks for core technology products to identify gaps and drive security resilience.

2. Security Control Hygiene & Cloud Security Patterns

• Develop and maintain robust Cloud Computing Platform (CCP) patterns for Azure Platform-as-a-Service (PaaS) and Software-as-a-Service (SaaS) offerings.
• Regularly perform periodic reviews and updates to CCP security patterns ensuring they reflect current security best practices and compliance standards.
• Provide security architecture expertise and engagement in the development and updating of Azure Infrastructure as Code (IaC), Azure policies, and related cloud security solutions.

3. Enhance User Experience of Security Controls

• Engage proactively with enterprise architecture teams, application development, and infrastructure groups to ensure security architectures are seamlessly integrated, enhancing usability while maintaining robust security.
• Participate and contribute actively to Enterprise Architecture Peer Reviews, ensuring security considerations are effectively embedded within architectural designs.
• Review, revise, and continuously enhance security standards and guidelines.
• Establish and manage the intake process for Security Architecture reviews related to Information Security Standards Requirements (ISSR).

4. Culture of Awareness, Ownership, and Accountability

• Align closely with Enterprise Architecture (EA) teams to synchronize security inputs with EA peer review schedules, minimizing impacts on business deliverables.
• Act as a security advocate and champion, fostering a proactive, informed, and accountable security culture across technology and product teams.
• Establish and deliver clear and meaningful metrics regarding security architecture activities, specifically tracking ISSR engagements, CCP pattern development, EA peer reviews, and updates to security standards.

External Basic Qualifications

• Bachelor's degree and at least 6 years of experience in a Security Engineering and/or Architecture role OR a High School Diploma/GED and at least 9 years of experience in a Security Engineering and/or Architecture role.
• Experience developing architectural frameworks and solutions.
• Experience establishing & maintaining relationships with individuals at all levels of the organization, including the executive level.
• Experience with vendor and vendor contract management, including SLA review.
• Experience diagnosing, isolating, and resolving complex issues and recommending and implementing strategies to resolve problems
• At least 2 years of experience contributing to financial decisions in the workplace.
• At least 3 years of direct leadership, indirect leadership and/or cross-functional team leadership.
• Willing to travel up to/at least 10% of the time for business purposes (within state and out of state).

Preferred Qualifications

Preferred Skills:

• Bachelor's degree in Information Security, Computer Science, Cybersecurity, Networking, or related field, or equivalent professional experience.
• 10+ years of progressive leadership experience in information security, cybersecurity architecture, cloud security, or a closely related discipline.
• Strong knowledge of Azure cloud solutions, PaaS/SaaS security best practices, and Infrastructure as Code (IaC).
• Experience with security frameworks and standards (e.g., CIS, NIST, ISO27001, Cloud Security Alliance).
• Demonstrated experience performing security architecture reviews and developing security patterns for enterprise-level cloud solutions.
• CISSP, CCSP, CISM, or other relevant security certifications.
• Experience in healthcare, pharmaceutical, or retail pharmacy sectors, dealing with regulated environments such as HIPAA, HITECH, or PCI DSS.
• Proven track record in driving strategic improvements in enterprise security architecture, controls hygiene, and security culture.

Job Function

Information Technology

Common Location

4170 LAFAYETTE CENTER DR,STE 400,CHANTILLY,VA,20151-01254-01206-1

Pay Grade ID

CORP-E2

Pay Type

Salaried

Start Rate

136000

Max Rate

231300