Security Architect

Profile

The Security Architect is a member of the Enterprise Architect team within the IT Strategy and Architecture department in Statoil Fuel and Retail AS (SFR). The Security Architect must have a thorough understanding of SFR’s IT-systems,  who has access to the systems and where the weak points of the systems are. We are looking for a person who has practical knowledge and interests in IT security, a person with a “white-hat” mindset. The security architect must continuously recommend ways to improve and update the security of the company’s IT-systems and services through hardware, software and processes. The person in this role  is to set user policies and protocols, monitor them, and enforce them, along with others in the security team. The security architect must also set up countermeasures that protect the system when security is compromised. The person in this role must balance the requirement for open easy access and usability, with risk and security to provide optimal business value for SFR.

Reports To
Senior Director - IT Strategy and Architecture

• Contributes to and outlines security guidelines.
• Actively tests and monitors security in SFR’s domains of interest.
• Establishes and enforces the Security Policy and Trust Model for administrators to follow in delegating and granting application privileges with others.
• Quality control that security policies, technologies and standards for system architects and designers are maintained in project proposals, implementations and development processes in SFR.
• Tracks warnings of new types of security threats and assures that the systems in place guard against these threats.
• Establishes the systems for discovering, tracking and convicting abusers of security and system integrity.
• Performs periodic risk evaluations and security audits on existing systems.
• Evangelizes the importance of IT security both internally and to external partners.
• Identity management

• Practical experience and skills in IT-security work
• Good communication and presentation skills
• Proven ability to understand business requirements and translate these into adequate security requirements.
• Strong IT-skills with hands on experience with security tools usage and security testing.
• Practical knowledge of security protocols and standards.
• Ability to drive organization to achieve relevant security certifications like the ISO 27K certifications
• Ability to define security policies and standards for system development, deployment and operations and to enforce these in a project and operational setting.
• Knowledge of Internet security standards and methods to secure Internet base services.
• Knowledge of mobile security risks and mechanisms to ensure mobile systems security.

Experience
3 or more years of practical IT-security experience, preferably in operations. New graduates who can document practical interest and activity in this field are alse encouraged to apply.
Certifications in this area will be a plus.

Education Requirements
Bachelor degree or higher in Computer Science with specialization in IT-security.

Personality profile (SFR core behaviours)

• Customer focus: Identifies and understands customer needs and puts them first in all activities and efforts
• Commercial mindset: Goes the extra mile to drive the commercial success of the company.
• Continuous improvement: Courageously moves the company forward today and into the future of retail
• Cooperation: Shows commitment to company decisions and making us succeed together
• Personal integrity: Promotes and lives the company standard of ethics, openness and values

We welcome you to apply for the position. Any questions to details related to the position, please contact Senior Director IT Strategy and Architecture Dalip Dewan, by email Dalip.Dewan@statoilfuelretail.com or by phone: +4798210112.

Deadline for application: 28 April 2014.

Our values - Courageous, Open, Passionate and Caring - are at the core of our management system. They drive our performance, and guide us in how we do business, how we work together, and how we act towards external stakeholders.

We welcome your application!