Cloud Security Architect

**Cloud Security Architect***: **Hours**:100% - entry by agreement **Country**:Cham (Switzerland)**The Position**: At VARO, customer experience is paramount to what we do. To help us design, build and secure enterprise cloud solutions that improve our customer experience, we are now looking for an experienced Cloud Security Architect. This person will be instrumental in securing our cloud environment. Working across the various business and IT disciplines, you will gather or assess business, compliance and technical requirements and translate them into components and controls of a resilient and highly available security architecture built on zero trust foundations, that improves our enterprise security posture and in parallel delivers great user experience. - If you have extensive Enterprise Cloud Security Architecture experience and are looking for a job that will present new challenges and allow you to grow your career, we want you to be part of our Team.Based at our offices in CHAM you will be reporting to the Head of Information Security and Infrastructure. The role requires a split of operational and project tasks required to maintain and secure the cloud and on-premise services consumed by the VARO Group. The Global Information Security and Infrastructure team comprises members spread across 3 European locations, making interaction with colleagues and an ability to travel nationally and across Europe a pivotal requirement. The nature of the role also entails some working outside of normal office hours, so flexibility of working hours is also essential. The position requires a self-motivated individual with strong customer orientation and proven delivery experience, who is - Structured, thorough, precise with a goal-oriented personality and very good analytical skills - Able to communicate in a clear, empathetic and solution-focused manner with cross-functional stakeholders - Able to drive effective teamwork, communication, collaboration and commitment to deliver services - A hands-on team player, able to work autonomously, multi-task to meet defined deadlines and perform & communicate under pressure **Key Responsibilities** - Develop and maintain a security compliance process that enables VARO to develop and implement security solutions and capabilities that are clearly aligned with business, technology, threat and customer drivers - Assist in the development of security strategy plans and roadmaps based on sound enterprise architecture practices - Assist in the development and maintenance of security architecture artifacts (e.g., models, templates, standards and procedures) that can be used to leverage security capabilities in projects and operations and ensure adherence to Security by Design and Privacy by Design principles - Track developments and changes in the digital business and threat environments to ensure that they're adequately addressed in security strategy plans and architecture artifacts - Draft security procedures and standards to be reviewed and approved - Document and ensure compliance to agreed baseline security configuration standards for operating systems (e.g., OS hardening), network segmentation, identity and access management (IAM) and cyber products and services - Document and ensure compliance for data encryption and tokenization in the organization, based on the organization's data classification criteria - Validate IT infrastructure and other reference architectures for security best practices and recommend changes to enhance security and reduce risks, where applicable - Review network segmentation to ensure least privilege for infrastructure access - Liaise with the cross-organisational business and IT teams to conduct security vendor assessments of existing and prospective vendors - Evaluate the statements of work (SOWs) for these providers to ensure that adequate security protections are in place. Assess the providers' SSAE 16 SOC 1 and SOC 2 audit reports (or alternative sources) for security-related deficiencies and required "user controls" - Support the testing and validation of internal and commercial security controls - Review security technologies, tools and services, and make recommendations to the broader VARO IT teams for their use, based on security, financial, operational and commercial metrics - Research emerging security technologies; coordinate security product evaluations, comparisons and “proof of concept” implementations **Required**: **Essentials Skills And Qualifications** - Fluent in English. German would be a bonus. - Minimum of 5 years’ experience working in a similar role. - Demonstrated ability to think strategically about business, product, and technical challenges - Deep hands-on experience leading the design, development and deployment of enterprise security solutions at scale or current hands on technology infrastructure, network, compute, storage, and virtualization experience - Understanding of IT security standards, best practice