MetLife

Role Value Proposition: 

This role serves as the leader of MetLife’s Global Cloud Security team, within Information security, focusing on security controls for the cloud environment. The primary focus will be securing cloud technologies, ensuring systems are properly implemented, appropriate processes are developed, and daily monitoring and alerts are managed.  This role must have a strong understanding of, and experience with, various IaaS, PaaS, and SaaS platforms, identifying and eliminating risks in these environments.

Key Responsibilities: 

• Globally oversee cloud security practices at MetLife to enable cloud acceleration in a secure manner
• Define the cloud security strategy, controls, architecture, and security practices to across Azure, AWS, and GCP environments
• Partner with architecture, engineering, application, security, and operational staff to identify and drive resolution on Cloud security projects and issues
• Champion DevSecOps practices to shift cloud security left with increased automation and preventative controls

• Train Business, Info Sec, and IT teams on cloud security best practices and procedures
• Conduct security reviews and provide recommendation for IaaS, PaaS, & SaaS Cloud environments
• Develop Cloud Security requirements documentation for IaaS, PaaS and CaaS environments

• Interface with vendors to ensure the appropriate tools, configurations, and workflows are in place
• Manage a team as well cross functional relationships to drive changes across a large organization, while fostering an environment of collaboration, enablement, and empathy

 Essential Business Experience and Technical Skills:

• 8+ years leading teams across multiple Information Security domains
• 4+ years of experience with Google Cloud, Microsoft Azure or AWS IaaS and PaaS environments
• Strong knowledge across network security, IAM, data loss prevention, security incident response, and vulnerability management
• Experience securing containers and microservices environments

• Strong record of success in supporting large scale programs, preferably in a global organization

Preferred:

• Industry recognized information security and cloud security certification (CISSP)
• Experience with Cloud Access Security Broker, CSPM, and CWPP tools
• Strong ability to communicate to stakeholders with various levels of expertise 

• Experience with scripting tools like PowerShell or Python