Job Descrption
Requirements
• 6+ years experience in Technology related field,
• 5+ years experience in Cloud/Platform Security,
• Familiarity with industry standards and compliance frameworks (such as SOC, SOX., NIST,, HIPAA) and experience in ensuring organizational adherence to these standards,
• (Desirable) Certifications such as CISSP, CISM, CISA, CEH, or vendor-specific certifications,
• (Desirable) Proficiency in managing security projects, including planning, execution, and successful delivery within timelines and budgets
What the job involves
• In this role, you will be responsible for leading the team of Platform Security Engineers responsible for our cloud security efforts,
• Oscar’s Platform Security team is focused on building security infrastructure and paved roads to enable Oscar’s cloud engineers to build faster and safer, while keeping Oscar’s infrastructure secure,
• You will collaborate extensively with diverse teams, offering strategic insights, engineering efforts, and counsel... to ensure the alignment of Oscar's security objectives with overarching business goals,
• You will be involved in shaping and driving Oscar's security strategies through proactive measures and continuous improvement and demonstrated curiosity on continuously evolving our approaches,
• You will report into the Chief Information Security Officer,
• Responsible for driving medium-to-long term innovation and strategy for cloud security at Oscar, and developing actionable approaches to implementation,
• Lead collaboration across cloud engineering functions to drive effective and secure outcomes that allow engineering teams to move faster while improving security,
• Develop solutions that secure the business while also meeting compliance obligations,
• Collaborate closely with cross-functional teams to proactively identify, address, and resolve security concerns across Oscar, including proposing enhanced controls and procedural strategies to mitigate technical risks,
• Lead internal workshops with cross functional teams to discuss outcomes from technical reviews and develop a plan for mitigating identified risks,
• Exhibit a deep understanding of Oscar’s technology footprint, how our systems work and how they may be attacked or abused,
• Collaborate effectively with Security Leadership, providing insights into technical issues and their potential impacts,
• Engage in multiple-layers of Oscar’s Technology stack to design security measures around protecting Oscar’s systems,
• Simplify intricate security concerns into actionable steps for effective remediation or risk mitigation,
• Define hardening and secure design standards and use them to perform architecture security reviews in partnership with developer teams,
• Compliance with all applicable laws and regulations,
• Other duties as assigned
Your CV has been submitted successfully.