Lead Cloud and Data Security Engineer

Johns Manville is a leading manufacturer and marketer of premium-quality insulation and commercial roofing, along with glass fibers and nonwovens for commercial, industrial and residential applications. Our products are used in a wide variety of industries including building products, aerospace, automotive and transportation, filtration, commercial interiors, waterproofing and wind energy. A proud member of the Berkshire Hathaway family of companies, we serve customers in more than 80 countries around the globe.

About the Role

This is the base salary pay range that an applicant can expect to make upon hire: $127,700.00-$191,500.00 annual. Pay within this range will vary based upon relevant experience, skills, and education among other factors. In addition, this position is eligible for an incentive bonus.

The Cloud and Data Security Engineer is responsible for the security architecture and management for Cloud and Enterprise Security. This role has responsibilities in plan, build, and run activities.

• In planning, this role will assist the CISO organization in the overall strategy for Information Security related to cloud and Microsoft technologies and will review technical solutions for adherence to that strategy and best fit for JM.
• Through building activities, this person will lead a team to design and configure elements for security projects.
• In running, the IT security lead responds to escalated tickets or problem reports. In the event of a security incident, the security lead may perform a post-event analysis to determine root cause and lead discussions to ensure necessary changes are implemented to avoid future issues.

Responsibilities

• Research, design, and implement enterprise security solutions that protect the company's market share, revenue, and brand. Solutions are designed to follow industry-standard best practices, regulatory guidelines, and corporate policies.
• Research, evaluate, and recommend security technologies that can be applied to technology solutions being developed or maintained internally or externally.
• Establish security configuration and controls for Microsoft and other cloud architectures.
• Build the overall employee security awareness strategy to help address gaps in knowledge.
• Lead large, highly complex global security projects, often delegating work to other team members.
• Understand both business and technology objectives when deploying projects. Requires ability to configure and test solutions.
• Senior-most technical support of operational Security including:
  • Data Protection Tools and Processes.
  • Cloud security Configuration.
  • Reviews user awareness trends and manages overall awareness program.
  • Escalation point for Enterprise Security including Office 365 security, Identity Management, Data Protection, etc.
• Manage employee phishing and security training tools.
• Escalation point for incidents. Provides technical leadership for complex security incidents.
• Prepare final remediation plans for complex issues requiring senior executive engagement.

Requirements

• Bachelor's degree with a minimum of 8 years’ experience in IT with at least 5 years in security and technical support.
• At least one certification such as CISSP, SANS GIAC, CISM, or Cloud Security Alliance Certifications (preferred).
• Knowledge of IT systems, processes, and controls.
• Knowledge in Microsoft Office 365 security and compliance.
• Understanding of financial and IT risk management and mitigation controls; regulatory controls and compliance; and vendor risk management.
• Leadership skills in bringing and implementing new ideas to an organization.
• Strong interpersonal, verbal, and written communication skills with a professional demeanor.
• Project Management Skills.
• Final escalation for data security issues such as Active Directory, Data Protection tools, Identity Management, and Single Sign-On.
• Leadership skills in developing and implementing new ideas to an organization.
• Ability to capture business requirements and build excellent technical specifications.
• Ability to research solutions and present findings to IT leadership.
• Deep understanding of Active Directory and LDAP concepts and how systems integrate with Active Directory.
• Thorough knowledge of Data Loss Prevention.
• Knowledge of Microsoft 365 Enterprise Mobility plus Security Solutions.
• Knowledge of Azure cloud solutions.

Benefits

• Comprehensive medical plans, dental plan, vision plan, wellness program, and critical illness insurance.
• 401(k) plan with a sizeable company match.
• Paid vacation, sick leave, and parental leave for eligible employees.
• Basic life insurance, short-term and long-term disability coverage, and an employee assistance program.
• Business travel accident coverage.
• Supplemental life insurance and accidental death and dismemberment insurance.
• Tax-saving accounts: health spending account, traditional flexible spending account, and dependent care spending account.
• Tuition reimbursement program for undergraduate and certain graduate programs.
• Company-wide mentoring program and vast educational opportunities, including soft and hard skills training.

Johns Manville believes diversity and inclusion in our workplace is critical for the long-term success of our company. We are committed to retaining, developing, and attracting a diverse workforce that fosters an inclusive work environment in which all employees are treated with dignity and respect.