Cloud Security Manager

Dentsply Sirona - York, PA

Full-time - Senior

York, PA

Miscellaneous Manufacturing

About the position

The Cloud Security Manager at Dentsply Sirona will lead the design and implementation of security solutions to support the company's cloud security strategy. This role focuses on evaluating the security posture maturity and ensuring that assets are protected in alignment with control frameworks and technical standards. The manager will develop comprehensive cloud security architecture, strategies, and support security operations while leading a team of security professionals.

Responsibilities

• Develop and implement enterprise cloud security policies, standards, and procedures in complex multi-cloud environments.
• Lead the enterprise design and architecture of secure cloud environments, ensuring compliance with industry standards and best practices.
• Conduct and manage risk assessments and vulnerability assessments to identify and mitigate security risks involving complex enterprise inter-cloud services.
• Lead collaborative efforts with cross-functional teams to integrate security into enterprise cloud-based projects and initiatives.
• Monitor and respond to security incidents and breaches, conducting skilled and thorough investigations and implementing corrective actions.
• Provide leadership and mentorship to a team of cloud security professionals, fostering a culture of continuous improvement and innovation.
• Maintain expertise with the latest cloud security trends, threats, and technologies, and provide solutions for enhancements.
• Direct technology evaluations including business case development, test case definition, vendor selection, deployment and management of cloud security tools and technologies based on industry standard criteria.
• Define process improvements and automation opportunities to gain efficiencies across security domains.
• Ensure compliance with relevant regulations and standards, such as GDPR, HIPAA, and ISO 27001.
• Recruit, develop, and manage a team of cloud experts in CGP, Azure, and AWS.
• Prepare and present regular reports on cloud security status and initiatives to senior management.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field; a Master's degree is preferred or relevant experience.
• Minimum of 7-10 years of experience in information security and 15+ years IT experience with a focus on cloud security.
• Strong knowledge of cloud platforms (e.g., AWS, Azure, Google Cloud) and cloud security best practices.
• Expert-level knowledge of information security, risk management, and data privacy practices.
• Experience identifying and remediating cloud related risks with Cloud Security Posture Management (CSPM) technologies or equivalent solutions.
• Good understanding of automation tooling and scripting languages.
• Experience with security frameworks and standards (e.g., NIST, ISO 27001).
• Proven track record of managing and leading security teams.
• Excellent problem-solving and analytical skills.
• Strong communication and interpersonal skills, with the ability to effectively communicate complex security concepts to non-technical stakeholders.

Nice-to-haves

• Expert in Cloud Architecture: Knowledge of cloud service models (IaaS, PaaS, SaaS) and deployment models (public, private, hybrid).
• Expert in Threat Intelligence Analysis: Staying updated on the latest threats and vulnerabilities to proactively defend against them.
• Expert in Secure Configuration Management: Ensuring that cloud resources are configured securely to prevent unauthorized access.
• Expert in Access Control and Identity Management: Implementing robust identity and access management (IAM) policies to control who can access what.
• Deep Knowledge of Data Encryption and Privacy: Protecting data through encryption and ensuring compliance with privacy regulations.
• Extensive Background in Incident Response and Disaster Recovery Planning: Preparing for and responding to security incidents and ensuring business continuity.
• Proven Track Record of Highly Effective Monitoring and Threat Hunting: Regularly monitoring cloud environments for suspicious activities and potential threats.
• Strong Communication and Collaboration: Effectively communicating security policies and collaborating with other teams.
• Leadership and Decision-Making: Leading enterprise security initiatives and making informed decisions to enhance cloud security.

Benefits

• Professional development opportunities
• High-performance culture
• Innovative work environment
• Team collaboration
• Health and wellness programs