10601 - Sr. Manager, Security Architecture & Engineering

10601 - Senior Manager, Security Architecture & Engineering
Location: Irvine, HQHyundai AutoEver America (HAEA) is the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis.
HAEA offers a truly global and collaborative environment. Here, you will drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.
At HAEA, we understand that IT is the cornerstone of today's fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai's Global Headquarters and North American operations.
If you are passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that is driving the future of automotive innovation.

Website: http://www.haeaus.com
 The Senior Manager, Security Architecture & Engineering owns the enterprise security reference architecture, secure-by-design standards, and the engineering and lifecycle management of security controls and tooling across cloud, network, endpoint, identity, data, and application environments. This leader manages a team of security architects and engineers and partners closely with Infrastructure, Cloud, Application Security, SOC/Incident Response, and Governance, Risk & Compliance (GRC) teams to design, build, and operate security solutions that protect the availability, integrity, and confidentiality of company information resources. The role also advises the organization on emerging security technologies and architectural patterns.
This position defines and maintains the multi-year security architecture roadmap and target state, aligned with control frameworks and architectural principles including Zero Trust, cloud security, identity and access management, network segmentation, and detection tooling. The Senior Manager sets technology standards for the security stack and leads team hiring, mentoring, performance development, workload prioritization, and delivery.
 • Own enterprise and solution security architecture, including threat modeling, architecture and design reviews, and reference architectures for cloud, network segmentation, identity, endpoint, data protection, and application security.
• Lead the engineering and implementation of security solutions and own the technology lifecycle and roadmap for security controls and tooling, with measurable goals for coverage, modernization, and retirement of legacy technologies.
• Translate approved policy into technical security standards, baselines, and reference architectures; chair or participate in the architecture review board; and manage exception and risk-acceptance processes for technical deviations.
• Support the development of security policies, standards, procedures, and related documentation.
• Gather and organize technical information regarding the organization’s mission, goals, needs, existing security products, and ongoing information security programs.
• Interpret regulatory and framework requirements, including NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, PCI, and CCPA, into technical control requirements and architecture decisions.
• Implement automated control enforcement and compliance-as-code, and provide technical evidence and control telemetry to GRC.
• Conduct security design assessments, architecture gap analyses, and control validation for engineered solutions, and lead remediation of identified findings.
• Review application and system development plans from an information security perspective and provide recommendations and corrective guidance.
• Design and engineer identity and access architecture, including IAM, PAM, MFA, conditional access, least-privilege, and Zero Trust models.
• Participate in and support third-party audit activities.
• Prepare and manage security reports, status updates, project presentations, executive summaries, and related documentation.
• Participate in the preparation of disaster recovery and business continuity plans for information systems.
 • Bachelor's degree or equivalent, with major coursework in computer science or a related field.
• Minimum of ten (10) years of progressive experience in computing and security.
• Minimum of five (5) years of experience leading security architecture or security engineering teams.
• Experience designing and implementing enterprise security architecture across hybrid and multi-cloud environments, including AWS and Azure, as well as network, identity, endpoint, SIEM, EDR/MDR, and application security domains in multi-platform environments.
• Hands-on knowledge of Zero Trust, DevSecOps, secure software development lifecycle practices, automation, and infrastructure-as-code.
• Experience with security assessments and incident response in a dynamic IT environment.
• Knowledge of disaster recovery and business continuity planning.
• Knowledge of preventive, detective, and corrective controls, including principles and techniques associated with system compromise and denial-of-service incidents and the tools used to detect and prevent them.
• Knowledge of information security issues, requirements, trends, and applicable laws.• CISSP (Certified Information Systems Security Professional).
• Architecture and technical certifications such as CISSP-ISSAP, CCSP, SABSA, or TOGAF.
• Cloud security certifications such as AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or Microsoft Certified: Cybersecurity Architect Expert (SC-100).Salary Range: $181,240 - $259,160
In addition to a competitive salary, this position offers a fantastic benefits package that includes comprehensive medical/dental coverage, generous PTO, education assistance, and annual merit increase eligibility in a growth-focused work environment.Our team thrives on collaboration, innovation, and continuous learning. We foster a supportive environment where every member is encouraged to share ideas and contribute to problem-solving. We value:
• Passion for Technology: We are enthusiastic about emerging technologies and their potential to transform the automotive industry.
• Agility: We work in an agile environment, adapting quickly to changes and continuously improving our processes.
• Teamwork: We believe in the power of teamwork and collaboration, supporting each other to achieve common goals.
• Growth: We prioritize personal and professional growth, offering opportunities for learning and development.
• Inclusivity: We maintain an inclusive culture where diverse perspectives are valued and everyone feels welcome.Our Company adheres to the equal employment opportunity guidelines set forth by federal, state, and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state, and local laws.
 

Powered by JazzHR