About the position
Sodexo, Inc. is seeking a Lead Information Security Analyst / Cloud Security Architect to join their North America information security team in Bethesda, MD. The role involves analyzing security challenges in the cloud as part of Sodexo's global digital transformation. The successful candidate will devise approaches to maintain and secure the Azure ecosystem, issue security requirements for IT projects, and define technical and functional security prerequisites for cloud projects. Responsibilities also include reviewing Azure Cloud services, contributing to security policies, managing cloud security projects, and supporting entities in deploying security solutions. The position requires assessing security risks and proposing mitigating measures for business projects impacting information and systems security in the public cloud.
Responsibilities
- Analyze and understand Security challenges in the Cloud in the context of Sodexo's global digital transformation.
- Devise a relevant approach to maintain and keep secure our Azure ecosystem.
- Issue security requirements for IT projects, especially those aimed to create Digital Service Data/AI Platform.
- Define technical and functional security pre-requisites in main cloud projects.
- Review Azure Cloud services and propose security requirements in line with the Sodexo IS&T Security Framework.
- Contribute to the definition, drafting and roll-out of security policies, directives, and guidelines.
- Manage cloud security projects including requirements identification, testing, solution selection, contract negotiation, and implementation.
- Support entities in deploying security solutions considering business requirements.
- Aid regions and BUs to migrate and/or deploy workloads in Sodexo public cloud.
- Assess security risks and define appropriate security measures and processes.
- Analyze business and IT requests impacting information and systems security in the public cloud and propose mitigating measures.
Requirements
- Bachelor's degree or foreign equivalent in Computer Science, Computer Engineering, Information Security, or related technical field.
- 5 years of progressively responsible professional experience in Information Security.
- 5 years of technical experience with IT systems (network, system, database, and applications).
- 5 years of experience with risk assessment methodologies (ISO27005 and eBIOS).
- 5 years of Cloud Security Architecture experience (AWS or Azure).
Benefits
- Medical, Dental, Vision Care and Wellness Programs
- 401(k) Plan with Matching Contributions
- Paid Time Off and Company Holidays
- Career Growth Opportunities and Tuition Reimbursement
