Director Security Architecture and Application Security

Company: Lucid Motors USA, Inc.
Location: Newark
Posted on: June 21, 2022

Job Description:

Director Security Architecture and Application Security Leading the future in luxury electric and mobility
At Lucid, we set out to introduce the most captivating, luxury electric vehicles that elevate the human experience and transcend the perceived limitations of space, performance, and intelligence. Vehicles that are intuitive, liberating, and designed for the future of mobility.
We plan to lead in this new era of luxury electric by returning to the fundamentals of great design - where every decision we make is in service of the individual and environment. Because when you are no longer bound by convention, you are free to define your own experience.
Come work alongside some of the most accomplished minds in the industry. Beyond providing competitive salaries, we're providing a community for innovators who want to make an immediate and significant impact. If you are driven to create a better, more sustainable future, then this is the right place for you.
We are currently seeking an experienced Security Architecture and Application Security (AppSec) Director/Senior Manager who will work directly with the Head of Cybersecurity to drive security maturity, implement security controls, and ensure process excellence as we manage global security risk and compliance. The Security Architecture and AppSec Director/Senior Manager will be adept at creating secure architectures and design patterns. You will also collaborate with product and engineering teams to drive secure & customer-centric product design. You will lead your team to drive cross-functional efforts to operationalize business objectives while minimizing cybersecurity risk.
The Role: Oversees the planning, budgeting and directing of all Security Architecture activities
Supports all facets of team management to attract, engage, retain, and nurture teams of outstanding engineers (e.g., recruitment, mentoring, training and development, performance evaluation)
Partners with the product & engineering teams and other cross functional partners to develop overall vision, strategy and roadmap for our Security systems and product suites
Uses industry standard security architecture frameworks to ensure security controls are well integrated and meet the quality attributes of confidentiality, integrity and availability. Ensures the information security architecture is tightly aligned to Lucid's business needs and technology strategies
Establishes coherent and consistent architectural governance and improve the transparency and quality of architecture and design activities
Oversees, develops, and continuously improves the application security program
Ensures Security Architecture and AppSec team is allocated to the most strategic business needs at Lucid by understanding Lucid's strategy and priorities
Support Lucid's adoption of cloud continuum and holistic digital transformation. Defines and oversee implementation of security requirements and practices for cloud-based applications
Enhances organizational-wide strategy and processes for the protection of data throughout the data lifecycle
Codifies security architecture principles, standards and controls throughout the organization
Oversees the planning and implementation of security systems by evaluating network, application, host, infrastructure and cloud technologies to ensure compliance with regulator needs
Qualifications: Bachelor's degree or equivalent industry experience, post Graduate degree a plus
10+ years of experience leading security teams, including 4+ years of experience in managing managers and teams.
10+ years of work experience architecting, developing, and launching product security programs and/or services; in-depth knowledge of system design and architecture and experience implementing a wide range of solutions
Strong engineering experience is also essential to ensure that architectures can be successfully implemented while factoring in ease of integration, operational overhead and user experience
Solid understanding of security protocols, cryptography, authentication, authorization, and security controls
Good understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)
Cloud experience a must, preferably with multiple cloud providers (preferably AWS & Azure)
Experience setting up secure build pipelines, CI/CD and familiarity with modern secure development practices and solutions (e.g., Jenkins, Gitlab, Bitbucket, etc.)
A service-oriented mentality while driving excellence across the organization
Strong organizational skills, both for yourself and the team
Business acumen: Proven understanding of business dynamics, goals, and product strategy. Knowledge of how Security fits into Lucid's overall business
Excellent interpersonal skills with the ability to communicate effectively verbally and in writing with all levels within the organization, including both technical and non-technical personnel
Certified in one or more of the following: CRISC, CISA, CISM, CISSP, SANS GIAC Security Certifications, ITIL, ISO27001
Automobile and/or manufacturing industry experience is a plus
At Lucid, we don't just welcome diversity - we celebrate it! Lucid Motors is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, national or ethnic origin, age, religion, disability, sexual orientation, gender, gender identity and expression, marital status, and any other characteristic protected under applicable State or Federal laws and regulations. Notice regarding COVID-19 vaccination requirement as a condition of gainful employment within the United States
At Lucid, we prioritize the health and wellbeing of our employees, families, and friends above all else. In response to the novel Coronavirus, and the increased transmissibility with recent variants, all new Lucid employees, whose job will be based in the United States, must provide original documentation confirming status as having received the prescribed inoculation (doses) based on the manufacturer's guidelines on their first day of employment.
Individuals seeking a medical and/or religious exemption from this requirement may be granted such an accommodation after submitting a formal request to and the subsequent review and approval thereof by our dedicated Covid-19 Response team.
To all recruitment agencies : Lucid Motors does not accept agency resumes. Please do not forward resumes to our careers alias or other Lucid Motors employees. Lucid Motors is not responsible for any fees related to unsolicited resumes.
Stay up to speed on the latest at Lucid.

Keywords: Lucid Motors USA, Inc., Newark , Director Security Architecture and Application Security, Executive , Newark, New Jersey